ICSA-11-082-01

icsaUScisa_csaf_ot

Ecava IntegraXor SQL

Advisory ansehen veröffentlicht 2011-12-24

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2011-1562UShigh7.5—
Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted P…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (1)

  • MitigationIntegraXor

    For more information, customers should contact Ecava support at (support@integraxor.com). Minimize network exposure for all control system devices, critical devices should not directly face the Internet. Locate control system networks and remote devices behind firewalls and isolate them from the business network. If remote access is required, employ secure methods such as virtual private networks (VPNs).

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan