VDE-2024-040

csafDEtrumpf_psirt

Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerabilities

Advisory ansehen veröffentlicht 2024-06-25

TruControl laser control software prior to version 1.60.0 uses an OpenSSH server version affected by CVE-2024-6387. The affected OpenSSH Server version could potentially lead to a remote code execution.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-6387UShigh8.1Exploit
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (10)

  • BehobenFirmware TruControl <1.60.0 installed on TruDiode

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruDisk

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 2000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 5000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 6000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 7000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 8000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 9000

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruPulse

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on redpowerDirect

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan