ICSA-24-151-01

icsaUScisa_csaf_ot

LenelS2 NetBox

Advisory ansehen veröffentlicht 2024-05-30

Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute malicious commands with elevated permissions

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-2422UShigh8.8—
LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execu…
CVE-2024-2421UScritical9.8—
LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to exe…
CVE-2024-2420UScritical9.8OT erhöht—
LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows an attacker to bypas…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

  • MitigationNetBox

    For more information, see Carrier's security bulletin for LenelS2.

    https://www.corporate.carrier.com/product-security/advisories-resources/
  • MitigationNetBox

    For more information, see Carrier's security bulletin for LenelS2.

    https://www.corporate.carrier.com/product-security/advisories-resources/
  • MitigationNetBox

    For more information, see Carrier's security bulletin for LenelS2.

    https://www.corporate.carrier.com/product-security/advisories-resources/
  • BehobenNetBox

    These vulnerabilities have been mitigated in NetBox release 5.6.2. It is strongly recommended that users upgrade to NetBox release 5.6.2 by contacting their authorized installer.Users should follow recommended deployment guidelines found in the NetBox hardening guide found in the NetBox built-in help menu.

  • BehobenNetBox

    These vulnerabilities have been mitigated in NetBox release 5.6.2. It is strongly recommended that users upgrade to NetBox release 5.6.2 by contacting their authorized installer.Users should follow recommended deployment guidelines found in the NetBox hardening guide found in the NetBox built-in help menu.

  • BehobenNetBox

    These vulnerabilities have been mitigated in NetBox release 5.6.2. It is strongly recommended that users upgrade to NetBox release 5.6.2 by contacting their authorized installer.Users should follow recommended deployment guidelines found in the NetBox hardening guide found in the NetBox built-in help menu.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan