Sebastian Dietz

Name of the Vulnerable Software and Affected Versions: Riello Netman 204 versions through 4.05 Description: The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device. Recommendations: For versions through 4.05, update the software to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Riello Netman 204 versions through 4.05 Description: The issue is related to improper neutralization of special elements, resulting in a SQL Injection vulnerability. This vulnerability is limited to the SQLite database of measurement data. Recommendations: For versions through 4.05, patch the system immediately and review logs for signs of compromise. Prioritize patching on all affected systems. As a temporary workaround, consider restricting access to the SQLite database of measurement data until a patch is available.

**Name of the Vulnerable Software and Affected Versions** PerkinElmer ProcessPlus versions through 1.11.6507.0 **Description** The issue is related to a local file inclusion in PerkinElmer ProcessPlus, allowing files on the Windows system to be accessible without authentication to external parties. **Recommendations** For versions through 1.11.6507.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PerkinElmer ProcessPlus versions through 1.11.6507.0 **Description** The issue allows an attacker to spawn a remote shell on the Windows system due to execution with unnecessary privileges in PerkinElmer ProcessPlus. **Recommendations** For versions through 1.11.6507.0, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PerkinElmer ProcessPlus versions through 1.11.6507.0 **Description** The issue is related to the use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows, allowing an attacker to login and potentially remove data on all prone installations. **Recommendations** For PerkinElmer ProcessPlus versions through 1.11.6507.0, consider changing the hard-coded MSSQL credentials to secure ones as a temporary workaround, until a patch is available. Restrict access to the MSSQL database to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements used in an OS command. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Korenix JetPort 5601v3 versions 1.2 and earlier **Description** The issue is related to the missing encryption of sensitive data, which allows eavesdropping. This can be exploited by a remote attacker to bypass existing security restrictions. **Recommendations** For Korenix JetPort 5601v3 versions 1.2 and earlier, consider implementing encryption for sensitive data transmission to prevent eavesdropping. As a temporary workaround, restrict access to sensitive data until a proper encryption mechanism is in place. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Korenix JetPort versions 1.2 and earlier Korenix JetPort 5601v3 versions through 1.2 **Description** The issue is related to weaknesses in the authentication procedure of the Korenix JetPort serial device server. It may allow a remote attacker to bypass existing security restrictions. **Recommendations** For Korenix JetPort versions 1.2 and earlier, update to a version later than 1.2 to resolve the issue. For Korenix JetPort 5601v3 versions through 1.2, update to a version later than 1.2 to resolve the issue. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Korenix JetPort 5601v3 versions 1.2 and earlier **Description** The issue is related to improper filtering of special characters, resulting in a command injection vulnerability. This vulnerability may allow a remote attacker to bypass existing security restrictions. **Recommendations** For Korenix JetPort 5601v3 versions 1.2 and earlier, update to a version that addresses the command injection vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Korenix JetNet devices versions prior to 2024/01 **Description** The issue is related to an Improper Authentication vulnerability in the TFTP Server component of Korenix JetNet devices. This vulnerability can be exploited by a remote attacker to bypass existing security restrictions, allowing abuse of the TFTP service. **Recommendations** For Korenix JetNet devices older than firmware version 2024/01, update the firmware to version 2024/01 or later to resolve the issue. As a temporary workaround, consider restricting access to the TFTP service until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Korenix JetNet Series versions prior to 2024/01 **Description** The issue is related to an Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series devices. This vulnerability can be exploited by a remote attacker to replace the whole operating system, including Trusted Executables, by sending specially crafted UDP packets to port 5010. **Recommendations** For versions prior to 2024/01, update the firmware to version 2024/01 or later to resolve the issue. As a temporary workaround, consider restricting access to the update process and port 5010 to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 **Description** The issue is related to a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request. This vulnerability may allow a remote attacker to execute arbitrary code by sending specially formed POST requests. **Recommendations** For Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21, consider disabling access to the vulnerable function until a patch is available. Restrict access to the affected devices to minimize the risk of exploitation. Avoid using the vulnerable API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 **Description** The issue is related to a command injection vulnerability in the NTP server input field. This vulnerability can be triggered by authenticated users via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code. **Recommendations** For Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21, consider disabling access to the NTP server input field until a patch is available. Restrict access to the vulnerable devices to minimize the risk of exploitation. Avoid using the NTP server input field in the affected devices until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 **Description** The issue is related to a command injection vulnerability in the device name input field. This vulnerability can be triggered by authenticated users via a crafted POST request to exploit the vulnerability, allowing remote attackers to execute arbitrary commands. The vulnerability exists due to the lack of measures to neutralize special elements used in the operating system command. **Recommendations** For Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21, consider disabling the device name input field until a patch is available to prevent exploitation. Restrict access to the vulnerable input field to minimize the risk of exploitation. Avoid using the device name input field in crafted POST requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.