Pepperl+Fuchs: Vulnerability in multiple VisuNet devices
Critical vulnerabilities have been discovered in the utilized component Remote Desktop Client by Microsoft.For more information see: https://msrc.microsoft.com/update-guide/vulnerability/CVE- 2022-21990
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-21990US | medium6.8 | — | ||
Remote Desktop Client Remote Code Execution Vulnerability | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Mitigation
The following external protective measured are required: - Connect only to trusted RDP servers. - Protect your RDP servers with anti-virus software and Intrusion Detection System (=IDS) - Access control to RDP servers and the role administrator and engineer on the affected device.
- Fixed
Mitigation The following external protective measured are required: Connect only to trusted RDP servers. Protect your RDP servers with anti-virus software and Intrusion Detection System(=IDS) Access control to RDP servers and the role administrator and engineer on theaffected device. UPDATE ASolution Install the following firmware with security patches to fix this vulnerability.For products with Windows 10 LTSB 2016:RM Image 5 Windows Cumulative Security Patch 03/2022 (KB5011495) incl. 2021-09 Servicing Stack Update (KB5005698) incl. Microsoft .NET Framework 4.7.2 for x64 (KB4054590) Link: https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33624 For products with Windows 10 LTSC 2019:RM Image 5.5 Windows Cumulative Security Patch for LTSC 03/2022 (KB5011503) incl. 08/2021 Servicing Stack Update (KB5005112) Link: https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-34182 Please note that the links provided are managed and point to the latest firmware availablefor VisuNet devices.END UPDATE A
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan