VDE-2022-012

csafDEpepperl_fuchs_psirt

Pepperl+Fuchs: Vulnerability in multiple VisuNet devices

Advisory ansehen veröffentlicht 2022-04-26

Critical vulnerabilities have been discovered in the utilized component Remote Desktop Client by Microsoft.For more information see: https://msrc.microsoft.com/update-guide/vulnerability/CVE- 2022-21990

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-21990USmedium6.8—
Remote Desktop Client Remote Code Execution Vulnerability
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (2)

  • Mitigation

    The following external protective measured are required: - Connect only to trusted RDP servers. - Protect your RDP servers with anti-virus software and Intrusion Detection System (=IDS) - Access control to RDP servers and the role administrator and engineer on the affected device.

  • Behoben

    Mitigation The following external protective measured are required: Connect only to trusted RDP servers. Protect your RDP servers with anti-virus software and Intrusion Detection System(=IDS) Access control to RDP servers and the role administrator and engineer on theaffected device. UPDATE ASolution Install the following firmware with security patches to fix this vulnerability.For products with Windows 10 LTSB 2016:RM Image 5 Windows Cumulative Security Patch 03/2022 (KB5011495) incl. 2021-09 Servicing Stack Update (KB5005698) incl. Microsoft .NET Framework 4.7.2 for x64 (KB4054590) Link: https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33624 For products with Windows 10 LTSC 2019:RM Image 5.5 Windows Cumulative Security Patch for LTSC 03/2022 (KB5011503) incl. 08/2021 Servicing Stack Update (KB5005112) Link: https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-34182 Please note that the links provided are managed and point to the latest firmware availablefor VisuNet devices.END UPDATE A

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan