Claroty Team82

**Name of the Vulnerable Software and Affected Versions** LenelS2 NetBox versions prior to and including 5.6.1 **Description** The issue is related to an authenticated remote code execution (RCE) that allows an attacker to execute malicious commands. It is associated with the injection or modification of arguments, which can enable a remote attacker to execute arbitrary commands. **Recommendations** For versions prior to and including 5.6.1, update to a version later than 5.6.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** LenelS2 NetBox versions prior to and including 5.6.1 **Description** The issue is related to an unauthenticated remote code execution (RCE) that allows an attacker to execute malicious commands with elevated permissions. It is associated with the failure to neutralize special elements used in the operating system command, which can be exploited by a remote attacker to execute arbitrary commands and elevate their privileges. **Recommendations** For versions prior to and including 5.6.1, update to a version later than 5.6.1 to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** LenelS2 NetBox versions prior to and including 5.6.1 **Description** The issue is related to hardcoded credentials in the LenelS2 NetBox access control and event monitoring system. This allows an attacker to bypass authentication requirements. The exploitation of this issue may enable a remote attacker to circumvent the authentication procedure. **Recommendations** For versions prior to and including 5.6.1, update to a version later than 5.6.1 to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** KEPServerEX versions 6.0 through 6.14.263 **Description** The issue is related to the implementation of the OPC UA protocol in KEPServerEX, which can lead to uncontrolled resource consumption. This occurs because KEPServerEX does not implement a check for recursively defined objects, allowing an attacker to send a maliciously created message that the decoder would try to decode until the stack overflowed and the device crashed. The estimated number of potentially affected devices worldwide is not specified. There are reports of real-world incidents where this issue was exploited, resulting in a denial-of-service. **Recommendations** For KEPServerEX versions 6.0 through 6.14.263, consider disabling the OPC UA protocol temporarily until a patch is available to prevent exploitation. Restrict access to the KEPServerEX to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.