Johnathan Law

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are affected are 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

**Name of the Vulnerable Software and Affected Versions** Oracle Hospitality OPERA 5 Property Services versions 5.6.19.23 through 5.6.27.4 **Description** An easily exploitable issue exists in the Oracle Hospitality OPERA 5 Property Services component, allowing an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require interaction from a user other than the attacker and may impact additional products. Successful exploitation can lead to unauthorized data modification, insertion, deletion, and read access to Oracle Hospitality OPERA 5 Property Services data. **Recommendations** Update Oracle Hospitality OPERA 5 Property Services to a version later than 5.6.27.4. Update Oracle Hospitality OPERA 5 Property Services to a version later than 5.6.26.10. Update Oracle Hospitality OPERA 5 Property Services to a version later than 5.6.25.17. Update Oracle Hospitality OPERA 5 Property Services to a version later than 5.6.19.23.

**Name of the Vulnerable Software and Affected Versions** Oracle Hospitality OPERA 5 versions 5.6.19.23 through 5.6.27.4 **Description** An easily exploitable issue exists in the Oracle Hospitality OPERA 5 product, specifically within the Opera Servlet component. An unauthenticated attacker with network access via HTTP can compromise the system. Successful exploitation may lead to unauthorized access to critical data, complete access to all accessible data, unauthorized data manipulation (update, insert, or delete), and a partial denial of service. **Recommendations** Oracle Hospitality OPERA 5 version 5.6.19.23 should be updated. Oracle Hospitality OPERA 5 version 5.6.25.17 should be updated. Oracle Hospitality OPERA 5 version 5.6.26.10 should be updated. Oracle Hospitality OPERA 5 version 5.6.27.4 should be updated.

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Series (BACnet) (All versions) APOGEE PXC Series (P2 Ethernet) (All versions) TALON TC Series (BACnet) (All versions) Description: A vulnerability has been identified in the affected devices, which contain a weak encryption mechanism based on a hard-coded key. This could allow an attacker to guess or decrypt the password from the cyphertext. Recommendations: For APOGEE PXC Series (BACnet) (All versions), consider disabling the use of the hard-coded encryption key until a patch is available. For APOGEE PXC Series (P2 Ethernet) (All versions), restrict access to sensitive data to minimize the risk of exploitation. For TALON TC Series (BACnet) (All versions), avoid using the weak encryption mechanism until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Series (BACnet) (All versions) APOGEE PXC Series (P2 Ethernet) (All versions) TALON TC Series (BACnet) (All versions) Description: A vulnerability has been identified that contains an out-of-bounds read in the memory dump function. This could allow an attacker with Medium or higher privileges to cause the device to enter an insecure cold start state. Recommendations: For APOGEE PXC Series (BACnet), consider disabling the memory dump function until a patch is available. For APOGEE PXC Series (P2 Ethernet), consider disabling the memory dump function until a patch is available. For TALON TC Series (BACnet), consider disabling the memory dump function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.