Felix Eberstaller

**Name of the Vulnerable Software and Affected Versions** Checkmk versions (affected versions not specified) **Description** The Checkmk Exchange plugin `check-mk-api` contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle (MitM) position to intercept network traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin Dell Powerscale (affected versions not specified) **Description** The Checkmk Exchange plugin for Dell Powerscale contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle (MitM) position to intercept network traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin VMware vSAN (affected versions not specified) **Description** The Checkmk Exchange plugin for VMware vSAN contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle (MitM) position to intercept traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin Freebox v6 agent (affected versions not specified) **Description** The Checkmk Exchange plugin Freebox v6 agent contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle (MitM) position to intercept network traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin versions (affected versions not specified) **Description** Improper certificate validation in the Checkmk Exchange plugin’s BGP monitoring functionality allows attackers positioned in a man-in-the-middle (MitM) position to intercept traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin check-mk-api versions prior to 5.8.1 **Description** The issue involves insecure deserialization and improper certificate validation. **Recommendations** For versions prior to 5.8.1, update to version 5.8.1 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: SIMATIC IPC DiagBase (All versions) SIMATIC IPC DiagMonitor (All versions) Description: A vulnerability has been identified where the affected devices do not properly restrict user permissions for the registry key. This could allow an authenticated attacker to load vulnerable drivers into the system, leading to privilege escalation or bypassing endpoint protection and other security measures. Recommendations: For SIMATIC IPC DiagBase, restrict access to the registry key to prevent unauthorized loading of drivers. For SIMATIC IPC DiagMonitor, limit user permissions to prevent exploitation of the vulnerability. As a temporary workaround, consider disabling the loading of vulnerable drivers into the system until a patch is available. Restrict access to the system to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: syngo.plaza VB30E versions prior to VB30E HF05 Description: The issue is related to the lack of protection of the SQL query structure, allowing an attacker to execute arbitrary SQL code and compromise the database. The affected application does not properly sanitize input data before sending it to the SQL server. This could allow an attacker with access to the application to use this vulnerability to execute malicious SQL commands and compromise the whole database. Recommendations: For syngo.plaza VB30E versions prior to VB30E HF05, update to VB30E HF05 or later to resolve the issue. As a temporary workaround, consider restricting access to the SQL server to minimize the risk of exploitation. Avoid using unsanitized input data in SQL queries until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Gessler GmbH WEB-MASTER (affected versions not specified) **Description** The issue concerns the use of a weak hashing algorithm for storing user account passwords. An attacker can potentially restore passwords by breaking the hashes stored on the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Gessler GmbH WEB-MASTER (affected versions not specified) **Description** The issue concerns a restoration account in Gessler GmbH WEB-MASTER that utilizes weak, hard-coded credentials. If exploited, this could grant an attacker control over the device's web management. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** KNX Protocol (affected versions not specified) **Description** Devices using KNX Connection Authorization that support Option 1 are susceptible to a lockout mechanism issue. An attacker with network access or physical access to the device can utilize the BCU key feature to set a password, effectively locking the device. Because this password often cannot be reset without the current credentials, users may be permanently unable to regain access. Real-world incidents known as KNXlock attacks have been observed, resulting in the permanent lockout of building automation devices such as lighting, heating, and shutters. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.