VDE-2024-034

csafDEtrumpf_psirt

Multiple TRUMPF products prone to nftables server vulnerabilities

Advisory ansehen veröffentlicht 2024-06-25

TruControl laser control software from versions 3.50.0 to 4.00.0.B use Linux kernel versions affected by CVE-2024-1086. The affected kernel vulnerability could lead to local privilege escalation.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-1086UShigh7.8OT kritischKEV
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allow…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (10)

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruDiode

    • Update to the new release 4.04.0 of the TruControl software version

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruDisk

    • Update to the new release 4.04.0 of the TruControl software version

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruFiber

    • Update to the new release 4.04.0 of the TruControl software version

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 2000

    • Update to the new release 4.04.0 of the TruControl software version

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 5000

    • Update to the new release 4.04.0 of the TruControl software version

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 6000

    • Update to the new release 4.04.0 of the TruControl software version

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 7000

    • Update to the new release 4.04.0 of the TruControl software version

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 8000

    • Update to the new release 4.04.0 of the TruControl software version

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruMicro 9000

    • Update to the new release 4.04.0 of the TruControl software version

  • BehobenTruControl >=3.50.0 | <=4.00.0 B installed on TRUMPF Laser SE TruPulse

    • Update to the new release 4.04.0 of the TruControl software version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan