Avtec Outpost 0810
Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges on the affected devices.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-42418US | high7.5OT erhöht | — | ||
Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information. | ||||
| CVE-2024-39776US | high7.5 | — | ||
Avtec Outpost stores sensitive information in an insecure location without proper access controls in place. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-235-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-235-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationOutpost 0810
Avtec recommends users update to Outpost v5.0 to resolve.
- MitigationOutpost 0810
Avtec recommends users update to Outpost v5.0 to resolve.
- MitigationOutpost Uploader Utility
Avtec recommends users update to Outpost v5.0 to resolve.
- MitigationOutpost Uploader Utility
Avtec recommends users update to Outpost v5.0 to resolve.
- BehobenOutpost Uploader Utility
When upgrading to Outpost Version 5.0.0 or later, you must reset your list of users to the default. More information and instructions can be found on Avtec's Outpost Uploader Utility User Guide for more information.
https://connect.avtecinc.com/bundle/Outpost_Uploader_Utility_User_Guide/page/Content/Outpost_User_Guide/Reset_Web_Auth.html - BehobenOutpost Uploader Utility
When upgrading to Outpost Version 5.0.0 or later, you must reset your list of users to the default. More information and instructions can be found on Avtec's Outpost Uploader Utility User Guide for more information.
https://connect.avtecinc.com/bundle/Outpost_Uploader_Utility_User_Guide/page/Content/Outpost_User_Guide/Reset_Web_Auth.html
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan