Red Lion Sixnet RTUs
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to execute commands with high privileges.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-42770US | critical9.8OT erhöht | — | ||
Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message… | ||||
| CVE-2023-40151US | critical9.8 | — | ||
When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-320-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-320-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (24)
- MitigationST-IPm-6350
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationST-IPm-6350
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationST-IPm-8460
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationST-IPm-8460
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-IPm2m-113-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-IPm2m-113-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-IPm2m-213-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-IPm2m-213-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-mIPm-135-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-mIPm-135-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-mIPm-245-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-mIPm-245-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- BehobenST-IPm-6350
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- BehobenST-IPm-6350
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- BehobenST-IPm-8460
ST-IPm-8460 - Install 8313_patch1_tcp_udr_all_blocked.tar.gz
- BehobenST-IPm-8460
ST-IPm-8460 - Install 8313_patch1_tcp_udr_all_blocked.tar.gz
- BehobenVT-IPm2m-113-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- BehobenVT-IPm2m-113-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- BehobenVT-IPm2m-213-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- BehobenVT-IPm2m-213-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- BehobenVT-mIPm-135-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- BehobenVT-mIPm-135-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- BehobenVT-mIPm-245-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- BehobenVT-mIPm-245-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan