PT-2014-2002 · Softing · Softing Fg-100 Pb Profibus

Publicado 2014-09-15 · Atualizado 2018-10-09 · CVE-2014-6617

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Softing FG-100 PB PROFIBUS firmware version FG-x00-PB V2.02.0.00

Description The issue is related to a hardcoded password for the root account in the firmware, allowing remote attackers to gain administrative access via a TELNET session. This is due to the use of predefined credentials. An attacker can exploit this to obtain root access to the device using a Telnet connection.

Recommendations For Softing FG-100 PB PROFIBUS firmware version FG-x00-PB V2.02.0.00, consider changing the hardcoded password for the root account to a unique and secure password to prevent unauthorized access. As a temporary workaround, consider disabling TELNET access until a patch is available. Restrict access to the device to minimize the risk of exploitation.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2018-00700

CVE-2014-6617

Produtos afetados

Softing Fg-100 Pb Profibus

Referências · 8

• 🔥 https://compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2014-005_softring_backdoor_account.txt · Exploit
• 🔥 http://packetstormsecurity.com/files/128976/Softing-FG-100-PB-Hardcoded-Backdoor.html · Exploit
• http://securityfocus.com/archive/1/archive/1/533902/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98512 · Nota
• http://securityfocus.com/archive/1/533902/100/0/threaded · Nota
• https://bdu.fstec.ru/vul/2018-00700 · Nota de Segurança
• http://securityfocus.com/bid/70927 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-6617 · Nota de Segurança