VDE-2024-040

csafDEtrumpf_psirt

Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerabilities

view advisory published 2024-06-25

TruControl laser control software prior to version 1.60.0 uses an OpenSSH server version affected by CVE-2024-6387. The affected OpenSSH Server version could potentially lead to a remote code execution.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-6387UShigh8.1Exploit
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • FixedFirmware TruControl <1.60.0 installed on TruDiode

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • FixedFirmware TruControl <1.60.0 installed on TruDisk

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • FixedFirmware TruControl <1.60.0 installed on TruMicro 2000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • FixedFirmware TruControl <1.60.0 installed on TruMicro 5000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • FixedFirmware TruControl <1.60.0 installed on TruMicro 6000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • FixedFirmware TruControl <1.60.0 installed on TruMicro 7000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • FixedFirmware TruControl <1.60.0 installed on TruMicro 8000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • FixedFirmware TruControl <1.60.0 installed on TruMicro 9000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • FixedFirmware TruControl <1.60.0 installed on TruPulse

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • FixedFirmware TruControl <1.60.0 installed on redpowerDirect

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan