RMC-100 Vulnerability in the Web UI (REST Interface)
An update is available that resolves a vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the web UI to stop.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-24999US | high7.5 | Exploit | ||
qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be use… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- BehobenRMC-100
The problem is corrected in the following product versions: RMC-100 Customer Package (2105452-048). RMC-100 LITE Customer Package (2106260-017). ABB recommends that customers apply the update at earliest convenience. Please find these updates here: RMC - Flow Computers (Flow Computers, Remote Controllers and RTUs) | Flow Computers | ABB
https://new.abb.com/products/measurement-products/upstream-oil-and-gas/flow-computers-remote-controllers/flow-computers/rmc - BehobenRMC-100 LITE
The problem is corrected in the following product versions: RMC-100 Customer Package (2105452-048). RMC-100 LITE Customer Package (2106260-017). ABB recommends that customers apply the update at earliest convenience. Please find these updates here: RMC - Flow Computers (Flow Computers, Remote Controllers and RTUs) | Flow Computers | ABB
https://new.abb.com/products/measurement-products/upstream-oil-and-gas/flow-computers-remote-controllers/flow-computers/rmc
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan