PT-2023-23269 · Unknown · Istar Edge G2+3

CVE-2023-3127 · Publicado 2023-07-11 · Atualizado 2023-07-20

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iSTAR Ultra (affected versions not specified) iSTAR Ultra LT (affected versions not specified) iSTAR Ultra G2 (affected versions not specified) iSTAR Edge G2 (affected versions not specified)

Description An unauthenticated user could log into the systems with administrator rights.

Recommendations For iSTAR Ultra, restrict access to administrator accounts until a fix is available. For iSTAR Ultra LT, consider disabling remote login functionality as a temporary workaround. For iSTAR Ultra G2, limit access to sensitive areas of the system to minimize potential damage. For iSTAR Edge G2, avoid using default administrator credentials and change them to strong passwords as an interim measure.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2023-3127

Produtos afetados

Istar Edge G2

Istar Ultra

Istar Ultra G2

Istar Ultra Lt

Referências · 5

• https://cisa.gov/news-events/ics-advisories/icsa-23-192-02 · Nota
• https://osv.dev/vulnerability/CVE-2023-3127 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-3127 · Nota de Segurança
• https://t.me/cibsecurity/66457 · Publicação no Telegram
• https://johnsoncontrols.com/cyber-solutions/security-advisories · Aviso do Fabricante