PT-2021-18740 · Omicron · Omicron Stationguard

Published 2021-04-20 · Updated 2021-04-23 · CVE-2021-30464

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OMICRON StationGuard versions prior to 1.10

Description The issue allows remote attackers to cause a denial of service, resulting in a connectivity outage. This can be achieved by sending crafted tcp/20499 packets to the CTRL Ethernet port.

Recommendations For OMICRON StationGuard versions prior to 1.10, update to version 1.10 or later to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2021-30464

Affected Products

Omicron Stationguard

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-30464 · Security Note
• https://omicronenergy.com/download/file/e81f23250097e7d5e1071dfbdb7f16d2 · Vendor Advisory
• https://omicronenergy.com/en/support/product-security · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30464 · Vendor Advisory