Pepperl+Fuchs: Anonymous FTP server and Telnet access allows information disclosure and manipulation
Critical vulnerabilities has been discovered in the product, mainly caused by ananonymous FTP server and Telnet access.The impact of the vulnerabilities on the affected device may result in Information disclosure Denial of service Device manipulation
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-6422US | —OT erhöht | — | ||
An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data. | ||||
| CVE-2024-6421US | — | — | ||
An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- VDE-2024-038: Pepperl+Fuchs: Anonymous FTP server and Telnet access allows information disclosure and manipulation - HTMLself
- CERT@VDE Security Advisories for Pepperl+Fuchs SEexternal
- VDE-2024-038: Pepperl+Fuchs: Anonymous FTP server and Telnet access allows information disclosure and manipulation - CSAFself
- Pepperl+Fuchs PSIRTexternal
Behebungen (2)
- Mitigation
An external protective measure is required. Minimize network exposure for affected products and ensure that they are not accessible via the Internet. Isolate affected products from the corporate network. If remote access is required, use secure methods such as virtual private networks (VPNs).
- Mitigation
An external protective measure is required. Minimize network exposure for affected products and ensure that they are not accessible via the Internet. Isolate affected products from the corporate network. If remote access is required, use secure methods such as virtual private networks (VPNs).
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan