PT-2023-15612 · Softing · Smartlink Sw-Ht

Anthony Goyette · Publicado 2023-11-06 · Atualizado 2024-10-28 · CVE-2022-48193

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Softing smartLink SW-HT versions prior to 1.30

Description The issue concerns the use of weak ciphers during secure communication via SSL in the affected software. This could potentially compromise the security of the communication.

Recommendations For versions prior to 1.30, update to version 1.30 or later to resolve the issue. As a temporary workaround, consider disabling the use of weak ciphers in SSL communication until a patch is available. Restrict access to sensitive data transmitted over SSL to minimize the risk of exploitation.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2022-48193

Produtos afetados

Smartlink Sw-Ht

Referências · 6

• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-11.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2022-48193 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-48193 · Nota de Segurança
• https://t.me/cvenotify/99789 · Publicação no Telegram
• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-11.json · Aviso do Fabricante
• https://t.me/cibsecurity/73636 · Publicação no Telegram