PT-2023-21845 · Omicron · Omicron Stationscout+1

Hendrik Schwartke · Publicado 2023-03-23 · Atualizado 2023-03-28 · CVE-2023-28610

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OMICRON StationGuard versions prior to 2.21 OMICRON StationScout versions prior to 2.21

Description The update process can be exploited by providing a modified firmware update image, allowing a remote attacker to gain root access to the system.

Recommendations For OMICRON StationGuard versions prior to 2.21, update to version 2.21 or later to resolve the issue. For OMICRON StationScout versions prior to 2.21, update to version 2.21 or later to resolve the issue.

Correção

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

CVE-2023-28610

Produtos afetados

Omicron Stationguard

Omicron Stationscout

Referências · 6

• https://t.me/cibsecurity/60589 · Publicação no Telegram
• https://omicronenergy.com/fileadmin/user_upload/website/files/product-security/osa-5.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-28610 · Nota de Segurança
• https://omicronenergy.com/en/support/product-security · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-28610 · Aviso do Fabricante
• https://t.me/cvenotify/46945 · Publicação no Telegram