ICSA-20-224-03

icsaUScisa_csaf_ot

Tridium Niagara

Advisory ansehen veröffentlicht 2020-08-11

Successful exploitation of this vulnerability could result in a denial-of-service condition.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-14483USmedium4.3—
A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationNiagara

    Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.

  • MitigationNiagara Enterprise Security

    Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.

  • BehobenNiagara

    Niagara Enterprise Security 4.9.0.60

  • BehobenNiagara Enterprise Security

    Niagara Enterprise Security 4.9.0.60

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan