Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vulnerability
Bender is publishing this advisory to inform customers about a security vulnerability in all devices running the COMTRAXX software. The user authorization is validated for most, but not all routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-19885US | critical9.1OT elevated | — | ||
In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data withou… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Mitigation
• restrict network access to the above-mentioned devices • install latest software update
- Fixed
Please install V4.2.0. (https://www.bender.de/service-support/downloadbereich)
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan