Horner Automation Remote Compact Controller
Advisory ansehen veröffentlicht 2022-12-01
Successful exploitation of these vulnerabilities could allow an attacker to obtain credentials to the affected device and obtain complete control.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-2642US | high7.5 | — | ||
Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device. | ||||
| CVE-2022-2641US | critical9.8OT erhöht | — | ||
Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remot… | ||||
| CVE-2022-2640US | high7.5 | — | ||
The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering. This could allow an attacker t… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-335-02 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (3)
- MitigationRCC 972
RCC 972: Update to Firmware Version 15.60 or later
https://hornerautomation.com/controller-firmware-cscan/ - MitigationRCC 972
RCC 972: Update to Firmware Version 15.60 or later
https://hornerautomation.com/controller-firmware-cscan/ - MitigationRCC 972
RCC 972: Update to Firmware Version 15.60 or later
https://hornerautomation.com/controller-firmware-cscan/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan