TRUMPF: Multiple products prone to X.Org server vulnerabilities
TruControl laser control software from versions 1.60.0 to 3.40.0 use a vulnerable X.Org server versions. The affected X.Org vulnerability is not validating the request length properly for the handler 'ProcXkbSetGeometry'. An authenticated Attacker could craft a request which could lead to memory out-of bounds write.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-2320US | high7.8 | — | ||
A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user… | ||||
| CVE-2022-2319US | high7.8 | — | ||
A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request length. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- Mitigation
Securing the access to the production network. Please contact your service partner (service.tls@trumpf.com) for instructions on how to get automatically informed for the new major release 3.42.0 of the new TruControl software version.
- Mitigation
Securing the access to the production network. Please contact your service partner (service.tls@trumpf.com) for instructions on how to get automatically informed for the new major release 3.42.0 of the new TruControl software version.
- Behoben
Retrieve instructions on how to deactivate the ssh access or activate the firewall on port 22 (SSH) of your laser.
- Behoben
Retrieve instructions on how to deactivate the ssh access or activate the firewall on port 22 (SSH) of your laser.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan