VDE-2024-034

csafDEtrumpf_psirt

Multiple TRUMPF products prone to nftables server vulnerabilities

view advisory published 2024-06-25

TruControl laser control software from versions 3.50.0 to 4.00.0.B use Linux kernel versions affected by CVE-2024-1086. The affected kernel vulnerability could lead to local privilege escalation.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-1086UShigh7.8OT criticalKEV
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allow…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruDiode

    • Update to the new release 4.04.0 of the TruControl software version

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruDisk

    • Update to the new release 4.04.0 of the TruControl software version

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruFiber

    • Update to the new release 4.04.0 of the TruControl software version

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 2000

    • Update to the new release 4.04.0 of the TruControl software version

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 5000

    • Update to the new release 4.04.0 of the TruControl software version

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 6000

    • Update to the new release 4.04.0 of the TruControl software version

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 7000

    • Update to the new release 4.04.0 of the TruControl software version

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 8000

    • Update to the new release 4.04.0 of the TruControl software version

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 9000

    • Update to the new release 4.04.0 of the TruControl software version

  • FixedTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruPulse

    • Update to the new release 4.04.0 of the TruControl software version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan