PT-2021-9435 · Unknown · Internal Gateway

Published 2021-09-29 · Updated 2022-07-08 · CVE-2020-12030

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Internal Gateway (affected versions not specified)

Description The issue arises from a flaw in the code that configures the internal gateway firewall when the VLAN feature is enabled. Enabling the VLAN setting causes the internal gateway firewall to become disabled, resulting in the exposure of all ports used by the gateway.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2020-12030

Affected Products

Internal Gateway

References · 4

• https://osv.dev/vulnerability/CVE-2020-12030 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12030 · Security Note
• https://t.me/cibsecurity/29687 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-20-135-02 · Note