Most recent entries from csaf_pepperlfuchsse

VDE-2018-008 — Pepperl+Fuchs: Remote Code Execution Vulnerability in HMI Devices

Fri, 06 Jul 2018 13:37:00 +0000

A remote code execution vulnerability in the Microsoft's Credential Security Support Provider protocol (CredSSP) was identified by security researchers. If exploited successfully, it is possible to relay user credentials for arbitrary code execution on the target system. See details on Microsoft Advisory CVE-2018-0866 (https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-0886)

VDE-2017-005 — Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption

Mon, 11 Dec 2017 13:26:00 +0000

Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. ecom instruments is a subsidiary company of PEPPERL+FUCHS.

VDE-2018-009 — Pepperl+Fuchs: Security advisory for MELTDOWN and SPECTRE attacks in ecom mobile Devices

Fri, 06 Jul 2018 14:47:00 +0000

Critical vulnerabilities within several CPUs have been identified by security researchers. These hardware vulnerabilities allow programs to learn about the contents of a system's memory, using side-channel attacks. Potential attack vectors against these vulnerabilities have been published and dubbed Meltdown and Spectre.

While programs are typically not permitted to read data from the OS kernel or from other programs, a malicious program can exploit Meltdown and Spectre to get hold of secrets stored in kernel memory or the memory of other programs executed on the same CPU.

As a consequence, an exploit could allow attackers to get access to any sensitive data, including passwords or cryptographic keys.

VDE-2019-004 — Pepperl+Fuchs: ecom Mobile Devices prone to BlueBorne Attack

Thu, 14 Mar 2019 07:52:00 +0000

A collection of Bluetooth attack vectors were discovered and related vulnerabilities known as "BlueBorne" were disclosed. These vulnerabilities collectively endanger amongst others Windows, Linux and mobile operating systems like Android or IOS. An unauthenticated attacker may take control of devices and perform commands or access sensitive data.

VDE-2019-011 — Pepperl+Fuchs: Remote code execution vulnerability in HMI devices

Wed, 29 May 2019 07:35:00 +0000

A remote code execution vulnerability exists in **Remote Desktop Services** – formerly known as **Terminal Services** – when an unauthenticated attacker connects to the target system using **RDP** and sends specially crafted requests. This vulnerability is **pre-authentication** and requires **no user interaction**. An attacker who successfully exploits this vulnerability could execute arbitrary code on the target system.

To exploit this vulnerability, an attacker would need to send a specially crafted request to the target system's Remote Desktop Service via **RDP**.

### Microsoft Advisories

- [CVE-2019-0708](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708) - [CVE-2019-1181](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1181) - [CVE-2019-1182](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1182)

VDE-2020-034 — Pepperl+Fuchs: VMT MSS and VMT IS - Several vulnerabilities in products utilizing WIBU-SYSTEMS CodeMeter components

Thu, 10 Sep 2020 13:22:00 +0000

Several vulnerabilities have been discovered in the utilized component WIBU-SYSTEMS CodeMeter Runtime. For detailed information please refer to WIBU-SYSTEMS original Advisories at https://wibu.com/support/security-advisories.html

VDE-2020-040 — Pepperl+Fuchs: Multiple Products prone to multiple vulnerabilities in Comtrol RocketLinux

Mon, 05 Oct 2020 12:00:00 +0000

Active TFTP-Service Unauthenticated Device Administration Undocumented Accounts Unauthenticated Device Administration Multiple Authenticated Command Injections

VDE-2021-018 — Pepperl+Fuchs: Multiple vulnerabilites in ICE1 Ethernet IO Modules

Wed, 12 May 2021 08:57:00 +0000

Critical vulnerability has been discovered in the utilized components rcX, mbedTLS, PROFINET IO Device and EtherNet/IP Core by Hilscher Gesellschaft für Systemautomation mbH. The impact of the vulnerabilities on the affected device is that it can result in: * Denial of Service (DoS) * Remote Code Execution (RCE) * Code Exposure

**Note:** ICE1-8IOL-S2-G60L-V1D (70103603) is not affected by CVE-2021-20986

VDE-2021-034 — Pepperl+Fuchs: Security Advisory for PrintNightmare Vulnerability in multiple HMI Devices

Fri, 30 Jul 2021 07:55:00 +0000

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. See details on Microsoft Advisory CVE-2021-34527 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527)

VDE-2022-012 — Pepperl+Fuchs: Vulnerability in multiple VisuNet devices

Tue, 26 Apr 2022 12:00:00 +0000

Critical vulnerabilities have been discovered in the utilized component Remote Desktop Client by Microsoft.For more information see: https://msrc.microsoft.com/update-guide/vulnerability/CVE- 2022-21990