Pepperl+Fuchs: Remote code execution vulnerability in HMI devices
A remote code execution vulnerability exists in **Remote Desktop Services** – formerly known as **Terminal Services** – when an unauthenticated attacker connects to the target system using **RDP** and sends specially crafted requests. This vulnerability is **pre-authentication** and requires **no user interaction**. An attacker who successfully exploits this vulnerability could execute arbitrary code on the target system. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target system's Remote Desktop Service via **RDP**. ### Microsoft Advisories - [CVE-2019-0708](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708) - [CVE-2019-1181](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1181) - [CVE-2019-1182](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1182)
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-1182US | high10.0 | — | ||
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using… | ||||
| CVE-2019-1181US | high10.0 | — | ||
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using… | ||||
| CVE-2019-0708US | critical9.8OT critical | KEV | ||
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP… | ||||
references
External citations — patches, advisories, analysis.
remediations (3)
- Fixed
- **Devices running RM Shell 4 with enabled Remote Desktop Services** → Should be updated with the newest **RM Image 4 Security Patches 01/2017 to 09/2019 (18-33400G)**: [https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33400](https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33400) *Note: For RM Shell 4 devices with disabled Remote Desktop Services (default commissioning state), this update is optional but recommended.* For support, please contact your local Pepperl+Fuchs sales representative.
- Fixed
- **Devices running RM Shell 4 with enabled Remote Desktop Services** → Should be updated with the newest **RM Image 4 Security Patches 01/2017 to 09/2019 (18-33400G)**: [https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33400](https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33400) *Note: For RM Shell 4 devices with disabled Remote Desktop Services (default commissioning state), this update is optional but recommended.* For support, please contact your local Pepperl+Fuchs sales representative.
- Fixed
- **Devices running RM Shell 4 with enabled Remote Desktop Services** → Should be updated with the newest **RM Image 4 Security Patches 01/2017 to 09/2019 (18-33400G)**: [https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33400](https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33400) *Note: For RM Shell 4 devices with disabled Remote Desktop Services (default commissioning state), this update is optional but recommended.* For support, please contact your local Pepperl+Fuchs sales representative.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan