ICSA-20-352-01

icsaUScisa_csaf_ot

Emerson Rosemount X-STREAM

Advisory ansehen veröffentlicht 2020-12-17

Successful exploitation of this vulnerability could allow an attacker through a specially crafted URL to download files and obtain sensitive information.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-27254UShigh7.5—
Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log a…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationX-STREAM enhanced XEFD

    In addition, Emerson recommends users of affected products continue to utilize current cybersecurity industry best practices. In the event such infrastructure is not implemented within an end user's network, action should be taken to ensure the affected products are connected to a well-protected network and properly segmented from the Internet. For more information on the Emerson Security notifications page.

    https://www.emerson.com/en-us/support/security-notifications
  • MitigationX-STREAM enhanced XEGK

    In addition, Emerson recommends users of affected products continue to utilize current cybersecurity industry best practices. In the event such infrastructure is not implemented within an end user's network, action should be taken to ensure the affected products are connected to a well-protected network and properly segmented from the Internet. For more information on the Emerson Security notifications page.

    https://www.emerson.com/en-us/support/security-notifications
  • MitigationX-STREAM enhanced XEGP

    In addition, Emerson recommends users of affected products continue to utilize current cybersecurity industry best practices. In the event such infrastructure is not implemented within an end user's network, action should be taken to ensure the affected products are connected to a well-protected network and properly segmented from the Internet. For more information on the Emerson Security notifications page.

    https://www.emerson.com/en-us/support/security-notifications
  • MitigationX-STREAM enhanced XEXF

    In addition, Emerson recommends users of affected products continue to utilize current cybersecurity industry best practices. In the event such infrastructure is not implemented within an end user's network, action should be taken to ensure the affected products are connected to a well-protected network and properly segmented from the Internet. For more information on the Emerson Security notifications page.

    https://www.emerson.com/en-us/support/security-notifications
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan