Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities
Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in Denial of service Bypassing of authentication Information disclosure
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-40735US | high7.5 | — | ||
The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener pap… | ||||
| CVE-2022-31629US | medium6.5 | Exploit | ||
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treat… | ||||
| CVE-2021-21707US | medium5.3 | Exploit | ||
In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If… | ||||
| CVE-2002-20001US | high7.5 | Exploit | ||
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-s… | ||||
| CVE-2020-7070US | medium5.3 | — | ||
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead t… | ||||
| CVE-2011-3389US | medium4.3OT high | Exploit | ||
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data b… | ||||
| CVE-2004-0230US | medium5.0 | Exploit | ||
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by… | ||||
| CVE-1999-0524US | low2.1 | Exploit | ||
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- Mitigation
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
- Mitigation
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
- Mitigation
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
- Mitigation
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
- Mitigation
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
- Mitigation
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
- Mitigation
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
- Mitigation
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan