PT-2016-1116 · Advantech · Eki-132X

Published 2016-01-09 · Updated 2016-01-18 · CVE-2015-7938

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech EKI-132x devices with firmware before 2015-12-31

Description The issue is related to weaknesses in the authentication procedure of the EKI series 1321 and 1322 industrial Ethernet switches. This allows remote attackers to bypass authentication via unspecified vectors.

Recommendations For Advantech EKI-132x devices with firmware before 2015-12-31, update the firmware to a version released after 2015-12-31 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2016-00361

CVE-2015-7938

Affected Products

Eki-132X

References · 3

• https://bdu.fstec.ru/vul/2016-00361 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-7938 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-344-01 · Note