Weidmueller: Accidentally open network port in u-controls and IoT-Gateways
A network port intended only for device-internal usage is accidentally accessible via external network interfaces.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-20999US | critical9.8 | — | ||
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- Mitigation
Restrict access to the network th device is connected to Do not directly connect the device to the internet
- Behoben
Weidmüller recommends upgrading affected devices to the current firmware version 1.12.3 or higher which fixes this vulnerability. Alternatively the following firmware versions which fix this vulnerability may be installed: | **Product** | **Affected (installed) firmware version** | **Fixed firmware version** | |-----------------------|-----------------------------------------------|--------------------------------| | Any affected product | 1.3.0 - 1.9.0 | 1.9.1 | | Any affected product | 1.10.1, 1.10.2 | 1.10.3 | | Any affected product | 1.10.0, 1.11.0, 1.12.1 | 1.12.3 |
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan