ICSA-18-275-03

icsaUScisa_csaf_ot

Entes EMG 12

Advisory ansehen veröffentlicht 2018-10-02

Successful exploitation of these vulnerabilities may allow attackers to gain unauthorized access and could allow the ability to change device configuration and settings.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2018-14826UScritical9.8—
Entes EMG12 versions 2.57 and prior The application uses a web interface where it is possible for an attacker to bypass authentication with a specially crafted URL. This could allo…
CVE-2018-14822UScritical9.8—
Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (2)

  • MitigationEMG12 Ethernet Modbus Gateway

    Entes recommends that users update to the latest available firmware version. This can be requested by calling, tel:+902163130110 or by email at teknikdestek@entes.com.tr

  • MitigationEMG12 Ethernet Modbus Gateway

    Entes recommends that users update to the latest available firmware version. This can be requested by calling, tel:+902163130110 or by email at teknikdestek@entes.com.tr

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan