ICSA-20-105-03

icsaUScisa_csaf_ot

Triangle MicroWorks SCADA Data Gateway

Advisory ansehen veröffentlicht 2020-04-14

These vulnerabilities allow remote attackers to execute arbitrary code and disclose on affected installations of Triangle Microworks SCADA Data Gateway with DNP3 Outstation channels. Authentication is not required to exploit these vulnerabilities.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-10615UShigh7.5—
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-service condition due to a lack of proper vali…
CVE-2020-10613UShigh7.5—
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive information due to the lack of proper vali…
CVE-2020-10611UScritical9.8—
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation o…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (3)

  • MitigationSCADA Data Gateway

    Triangle Microworks recommends users update to Version 4.0.123

  • MitigationSCADA Data Gateway

    Triangle Microworks recommends users update to Version 4.0.123

  • MitigationSCADA Data Gateway

    Triangle Microworks recommends users update to Version 4.0.123

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan