Younes Dragoni

**Nome do software vulnerável e versões afetadas** IntelliBridge EC 40 e 60 Hub, versões C.00.04 e anteriores **Descrição** O problema diz respeito a credenciais codificadas de forma rígida, como senhas ou chaves criptográficas, utilizadas para autenticação de entrada, comunicação de saída para componentes externos ou criptografia de dados internos. **Recomendações** Para as versões C.00.04 e anteriores, considere alterar as credenciais codificadas de forma rígida para credenciais únicas e seguras, a fim de mitigar o risco de exploração. Como solução temporária, restrinja o acesso ao sistema afetado até que um patch ou atualização esteja disponível.

**Nome do software vulnerável e versões afetadas** Série de produtos TOYOPUC da JTEKT Corporation – Todas as versões **Descrição** O problema ocorre quando a comunicação Ethernet da série de produtos TOYOPUC da JTEKT Corporation é deixada em estado aberto por um invasor. Como resultado, não é possível estabelecer comunicação Ethernet com outros dispositivos, dependendo das configurações dos parâmetros de ligação. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers versions 20 through 30 and earlier. **Description** An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering. **Recommendations** For versions 20 through 30 and earlier, a cold restart is required to recover from the issue. As a temporary workaround, consider restricting access to the web server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rockwell Automation RSLinx Classic versions 4.00.01 and prior **Description** The issue is related to an uncontrolled resource consumption vulnerability. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to "Port 44818", causing the software application to stop responding and crash, resulting in a denial of service. The user must restart the software to regain functionality. **Recommendations** For Rockwell Automation RSLinx Classic versions 4.00.01 and prior, consider restricting access to "Port 44818" to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the affected port in the software configuration to prevent potential crashes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rockwell Automation RSLinx Classic versions 4.00.01 and prior **Description** The issue is related to a buffer overflow in memory. It may allow a remote attacker to cause a denial of service by sending a specially crafted CIP packet to port 44818. This can cause the RSLinx Classic application to terminate, requiring a manual restart to regain functionality. **Recommendations** For versions 4.00.01 and prior, manually restart the software after a termination to regain functionality. As a temporary workaround, consider restricting access to port 44818 to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 **Description** The issue allows a specially crafted DLL file to be placed in the search path and loaded as an internal and valid DLL, which may allow arbitrary code execution. **Recommendations** For Emerson DeltaV DCS version 11.3.1, update to a version that includes a fix for this issue. For Emerson DeltaV DCS version 12.3.1, update to a version that includes a fix for this issue. For Emerson DeltaV DCS version 13.3.0, update to a version that includes a fix for this issue. For Emerson DeltaV DCS version 13.3.1, update to a version that includes a fix for this issue. For Emerson DeltaV DCS version R5, update to a version that includes a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 **Description** The issue is related to improper path validation, which may allow a remote attacker to replace executable files. This could potentially lead to security breaches. **Recommendations** For versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5, update to a version that properly validates paths to prevent executable file replacement. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rockwell Automation RSLinx Classic versions 4.00.01 and prior **Description** The issue allows a remote threat actor to send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. It also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code. This is due to a buffer overflow vulnerability in the ENGINE.dll file of the RSLinx Classic server, which can be exploited by sending specially crafted CIP packets to port 44818, potentially allowing an attacker to execute arbitrary code or cause a denial of service. **Recommendations** For versions 4.00.01 and prior, consider disabling access to Port 44818 as a temporary workaround until a patch is available. Restrict access to the ENGINE.dll file to minimize the risk of exploitation. Avoid using the `CIP` protocol in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GE PACSystems RX3i CPE305/310 versions 9.20 and prior GE PACSystems RX3i CPE330 version 9.21 and prior GE PACSystems RX3i CPE 400 version 9.30 and prior GE PACSystems RSTi-EP CPE 100 all versions GE PACSystems CPU320/CRU320 RXi all versions **Description** The device does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable. **Recommendations** For GE PACSystems RX3i CPE305/310 versions 9.20 and prior, update to a version later than 9.20. For GE PACSystems RX3i CPE330 version 9.21 and prior, update to a version later than 9.21. For GE PACSystems RX3i CPE 400 version 9.30 and prior, update to a version later than 9.30. For GE PACSystems RSTi-EP CPE 100 all versions, consider implementing additional security measures to prevent remote attacks. For GE PACSystems CPU320/CRU320 RXi all versions, consider implementing additional security measures to prevent remote attacks.

**Name of the Vulnerable Software and Affected Versions** Emerson Process Management ControlWave Micro Process Automation Controller versions prior to CWM v.05.78.00 **Description** A Stack-based Buffer Overflow issue was discovered, caused by sending crafted packets on Port 20547, which could force the PLC to change its state into halt mode. **Recommendations** For versions prior to CWM v.05.78.00, update the firmware to a version later than CWM v.05.78.00 to resolve the issue. As a temporary workaround, consider restricting access to Port 20547 to minimize the risk of exploitation.