PEPPERL+FUCHS VisuNet RM, VisuNet PC, and Box Thin Client
Successful exploitation of this vulnerability could allow attackers to intercept sensitive communications, establish a man-in-the-middle attack, achieve administrator privileges, and execute remote code.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-0886US | high7.0 | Exploit | ||
The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Wind… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-18-198-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- MitigationBox Thin Client BTC
After deploying the patch, all connected third-party clients or servers must use the latest version of the CredSSP protocol.
- MitigationVisuNet PC
After deploying the patch, all connected third-party clients or servers must use the latest version of the CredSSP protocol.
- MitigationVisuNet RM
After deploying the patch, all connected third-party clients or servers must use the latest version of the CredSSP protocol.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan