Pepperl+Fuchs: ecom Mobile Devices prone to BlueBorne Attack
A collection of Bluetooth attack vectors were discovered and related vulnerabilities known as "BlueBorne" were disclosed. These vulnerabilities collectively endanger amongst others Windows, Linux and mobile operating systems like Android or IOS. An unauthenticated attacker may take control of devices and perform commands or access sensitive data.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-0785US | medium6.5 | Exploit | ||
A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-6314669… | ||||
| CVE-2017-0783US | medium6.5 | — | ||
A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-6314570… | ||||
| CVE-2017-0782US | high8.8 | — | ||
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146237… | ||||
| CVE-2017-0781US | high8.8 | Exploit | ||
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105… | ||||
| CVE-2017-8628US | medium6.8 | — | ||
Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 allows a spoofing vulnerability due to Microsof… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (5)
- Behoben
Customers using affected Pepperl+Fuchs / ecom instruments products are recommended to update the device. For released firmware updates see table below. | Product | Date | Update Source | |---------------------|-----------|----------------------| | CT50-Ex Android | 09/2017 | FOTA-Update | | CT50-Ex Windows | 10/2017 | Microsoft Update | | Pad-Ex 01 | 09/2017 | Microsoft Update | | Smart-Ex 01 | 09/2018 | FOTA-Update | | Smart-Ex 201 | 10/2018 | FOTA-Update | In case there is no update available, users should consider the following workaround: Deactivation of Bluetooth on the device Unused or not needed Bluetooth should be switched off / disabled on affected devices.
- Behoben
Customers using affected Pepperl+Fuchs / ecom instruments products are recommended to update the device. For released firmware updates see table below. | Product | Date | Update Source | |---------------------|-----------|----------------------| | CT50-Ex Android | 09/2017 | FOTA-Update | | CT50-Ex Windows | 10/2017 | Microsoft Update | | Pad-Ex 01 | 09/2017 | Microsoft Update | | Smart-Ex 01 | 09/2018 | FOTA-Update | | Smart-Ex 201 | 10/2018 | FOTA-Update | In case there is no update available, users should consider the following workaround: Deactivation of Bluetooth on the device Unused or not needed Bluetooth should be switched off / disabled on affected devices.
- Behoben
Customers using affected Pepperl+Fuchs / ecom instruments products are recommended to update the device. For released firmware updates see table below. | Product | Date | Update Source | |---------------------|-----------|----------------------| | CT50-Ex Android | 09/2017 | FOTA-Update | | CT50-Ex Windows | 10/2017 | Microsoft Update | | Pad-Ex 01 | 09/2017 | Microsoft Update | | Smart-Ex 01 | 09/2018 | FOTA-Update | | Smart-Ex 201 | 10/2018 | FOTA-Update | In case there is no update available, users should consider the following workaround: Deactivation of Bluetooth on the device Unused or not needed Bluetooth should be switched off / disabled on affected devices.
- Behoben
Customers using affected Pepperl+Fuchs / ecom instruments products are recommended to update the device. For released firmware updates see table below. | Product | Date | Update Source | |---------------------|-----------|----------------------| | CT50-Ex Android | 09/2017 | FOTA-Update | | CT50-Ex Windows | 10/2017 | Microsoft Update | | Pad-Ex 01 | 09/2017 | Microsoft Update | | Smart-Ex 01 | 09/2018 | FOTA-Update | | Smart-Ex 201 | 10/2018 | FOTA-Update | In case there is no update available, users should consider the following workaround: Deactivation of Bluetooth on the device Unused or not needed Bluetooth should be switched off / disabled on affected devices.
- Behoben
Customers using affected Pepperl+Fuchs / ecom instruments products are recommended to update the device. For released firmware updates see table below. | Product | Date | Update Source | |---------------------|-----------|----------------------| | CT50-Ex Android | 09/2017 | FOTA-Update | | CT50-Ex Windows | 10/2017 | Microsoft Update | | Pad-Ex 01 | 09/2017 | Microsoft Update | | Smart-Ex 01 | 09/2018 | FOTA-Update | | Smart-Ex 201 | 10/2018 | FOTA-Update | In case there is no update available, users should consider the following workaround: Deactivation of Bluetooth on the device Unused or not needed Bluetooth should be switched off / disabled on affected devices.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan