Claroty Research

**Name of the Vulnerable Software and Affected Versions** EisBaer Scada (affected versions not specified) **Description** The issue is related to incorrect permission assignment for a critical resource in the SCADA system. This could allow a remote attacker to gain unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EisBaer Scada (affected versions not specified) **Description** The issue is related to the use of dangerous methods or functions in the SCADA system. Exploitation of this issue may allow a remote attacker to execute arbitrary code. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EisBaer Scada (affected versions not specified) **Description** The issue is related to the storage of passwords in plaintext, which could allow an attacker to disclose protected information and compromise the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EisBaer Scada (affected versions not specified) **Description** The issue is related to the use of a hard-coded cryptographic key, which can allow an attacker to gain unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EisBaer Scada (affected versions not specified) **Description** The issue is related to the exposure of sensitive information, allowing an unauthorized actor to gain access to protected information. This can be exploited by a remote attacker. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Synel SYnergy Fingerprint Terminals (affected versions not specified) **Description** The issue concerns the use of hard-coded credentials, which is a security risk. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Synel SYnergy Fingerprint Terminals (affected versions not specified) **Description** The issue is related to OS Command Injection, which is a type of attack where an attacker can inject and execute system commands. This can potentially allow unauthorized access and control over the system. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ROZCOM server framework (affected versions not specified) **Description** The issue is related to a misconfiguration in the ROZCOM server framework that may allow information disclosure via an unspecified request. No details are provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ROZCOM client (affected versions not specified) **Description** The issue concerns the use of hard-coded credentials in the ROZCOM client, which is a security risk. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Teltonika RUT router firmware versions 00.07.00 through 00.07.03 **Description** The issue is an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that contains an OS command injection payload. **Recommendations** For versions 00.07.00 through 00.07.03, as a temporary workaround, consider restricting the use of the Lua service until a patch is available. Avoid using user-provided package names in the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Teltonika’s Remote Management System versions prior to 4.10.0 **Description** The issue concerns the virtual private network (VPN) hub feature in Teltonika’s Remote Management System, which utilizes OpenVPN for cross-device communication. This feature allows new devices to connect and communicate with all Teltonika devices already connected to the VPN. Additionally, the OpenVPN server enables users to route through it. An attacker could exploit this by routing a connection to a remote server through the OpenVPN server, thereby gaining the ability to scan and access data from other Teltonika devices connected to the VPN. **Recommendations** For versions prior to 4.10.0, update to version 4.10.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the OpenVPN server to minimize the risk of exploitation. Avoid using the VPN hub feature until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Teltonika RUT router firmware versions 00.07.00 through 00.07.03.4 **Description** The packet dump utility in the firmware contains proper validation for filter parameters, but the variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, potentially resulting in arbitrary code execution. **Recommendations** For versions 00.07.00 through 00.07.03.4, consider restricting access to the UCI configuration utility to prevent modification of the validation variables. As a temporary workaround, consider disabling the packet dump utility until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 **Description** The affected product allows an attacker to access the device's main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other devices' information. **Recommendations** For versions prior to 1.42.06162022, update to version 1.42.06162022 or later to resolve the issue. As a temporary workaround, consider restricting access to the device's main management page from the cloud until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 **Description** The issue allows unauthenticated users to open PHP index pages without authentication and download the history file from the device. The history file includes the latest actions completed by specific users. **Recommendations** For versions prior to 1.42.06162022, update to version 1.42.06162022 or later to resolve the issue. As a temporary workaround, consider restricting access to PHP index pages to prevent unauthorized downloads of the history file.

**Name of the Vulnerable Software and Affected Versions** Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 **Description** The issue arises from certain PHP pages only validating when a valid connection is established with the database, but not verifying the validity of a user. This lack of verification allows attackers to potentially read the state of outlets. **Recommendations** For versions prior to 1.42.06162022, update to version 1.42.06162022 or later to resolve the issue. As a temporary workaround, consider restricting access to the PHP pages that do not verify user validity to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 **Description** The issue allows a specially crafted PHP script to use parameters from an HTTP request to create a URL capable of changing the host parameter. The changed host parameter in the HTTP could point to another host that will send a request to the host or IP specified in the changed host parameter. **Recommendations** For versions prior to 1.42.06162022, update to version 1.42.06162022 or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTP request parameters to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 **Description** The affected product exposes sensitive data concerning the device. **Recommendations** For versions prior to 1.42.06162022, update to version 1.42.06162022 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 **Description** The issue is related to the device's existing firmware, which allows unauthenticated users to access an old PHP page vulnerable to directory traversal. This may enable a user to write a file to the webroot directory. The vulnerability is associated with incorrect restriction of the path name to a directory with limited access, which can be exploited by a remote attacker. **Recommendations** For versions prior to 1.42.06162022, update the firmware to version 1.42.06162022 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable PHP page until a patch is available. Avoid using the vulnerable directory traversal functionality in the webroot directory until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 **Description** The issue is related to a vulnerability in the web interface of the iBoot-PDU managed power distribution unit, which is associated with the possibility of command injection. This vulnerability may allow a remote attacker to inject operating system commands due to a specific function not sanitizing user input. **Recommendations** For versions prior to 1.42.06162022, update to version 1.42.06162022 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable function to minimize the risk of exploitation.