PT-2024-13841 · Indo Sol · Indo-Sol Profinet-Inspektor Nt

Fabian Weber · Published 2024-02-26 · Updated 2025-05-05 · CVE-2023-49959

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Indo-Sol PROFINET-INspektor NT versions 2.4.0 and earlier

Description A command injection issue in the gedtupdater service of the firmware allows remote attackers to execute arbitrary system commands with root privileges. This is achieved via a crafted filename parameter in POST requests to the "/api/updater/ctrl/start update" endpoint.

Recommendations For Indo-Sol PROFINET-INspektor NT versions 2.4.0 and earlier, consider disabling the gedtupdater service until a patch is available. Restrict access to the "/api/updater/ctrl/start update" endpoint to minimize the risk of exploitation. Avoid using the filename parameter in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-49959

Affected Products

Indo-Sol Profinet-Inspektor Nt

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-49959 · Security Note
• https://osv.dev/vulnerability/CVE-2023-49959 · Vendor Advisory
• https://t.me/cvenotify/120868 · Telegram Post
• https://twitter.com/CVEnew/status/1762137186017673558 · Twitter Post
• https://code-white.com/public-vulnerability-list · Note
• https://indu-sol.com/en/products/profinet/diagnostics/profinet-inspektorr-nt · Note