Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vulnerability
Bender is publishing this advisory to inform customers about a security vulnerability in all devices running the COMTRAXX software. The user authorization is validated for most, but not all routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-19885US | critical9.1OT erhöht | — | ||
In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data withou… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- Mitigation
• restrict network access to the above-mentioned devices • install latest software update
- Behoben
Please install V4.2.0. (https://www.bender.de/service-support/downloadbereich)
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan