ICSA-14-343-01

Yokogawa FAST/TOOLS XML External Entity

Advisory ansehen veröffentlicht 2014-09-11

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2014-7251US	low3.2	0.32% (25th)	—	2014-12-06
XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service (CPU or ne…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

ICS Advisory ICSA-14-343-01 JSONself
Recommended Practicesexternal
ICS Advisory ICSA-14-343-01 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (1)

MitigationFAST/TOOLS
Older systems, using earlier revisions (R9.01 – R9.04) than the target revision (R9.05), should upgrade to the target revision (R9.05) and then apply the service pack. Contact Yokogawa support and services if it is difficult to upgrade the system to the target revision (R9.05). In addition, the vulnerability will be corrected and upgraded to the latest version (R10.01) of FAST/TOOLS.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan