ICSA-19-262-01

icsaUScisa_csaf_ot

Tridium Niagara

Advisory ansehen veröffentlicht 2019-09-19

Successful exploitation of these vulnerabilities could allow a local user to escalate their privileges.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-13528USmedium4.4—
A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JAC…
CVE-2019-8998UShigh7.8—
An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Pla…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • MitigationNiagara

    Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.

  • MitigationNiagara

    Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.

  • MitigationNiagara AX

    Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.

  • MitigationNiagara AX

    Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.

  • BehobenNiagara

    Niagara AX 3.8u4: NRE Config Dist: 3.8.401.1

  • BehobenNiagara

    Niagara AX 3.8u4: NRE Config Dist: 3.8.401.1

  • BehobenNiagara AX

    Niagara AX 3.8u4: NRE Config Dist: 3.8.401.1

  • BehobenNiagara AX

    Niagara AX 3.8u4: NRE Config Dist: 3.8.401.1

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan