Pepperl+Fuchs: Use after free vulnerability in Smart-Ex 02 and Smart-Ex 03
A critical security vulnerability was discovered in the products, which is caused by the IPv6 stack in the Linux kernel.The impact of the vulnerability on the affected products may result in Elevation of privileges
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-36971US | high7.8OT kritisch | KEV | ||
In the Linux kernel, the following vulnerability has been resolved:
net: fix __dst_negative_advice() race
__dst_negative_advice() does not enforce proper RCU rules when
sk->dst_c… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (1)
- Mitigation
A protective measure is required. Control access for privileged users. Use IPv4 instead of IPv6. Update the products, when an update is available. The Issue will be fixed with MR11 on Smart-Ex 02 in September 2024. The Issue will be fixed with MR3 on SMART-EX 03 in August 2024.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan