CVE-2023-40151criticalCWE-749

Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 10epss 1.1%

probabilidad de explotación

1.1%top 36% de las CVE

explotación observada

noninguna fuente lo reporta

When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message comes over TCP/IP the RTU will simply accept the message with no authentication challenge.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Productos afectados

Red Lion Controls · ST-IPm-6350 Red Lion Controls · ST-IPm-8460 Red Lion Controls · VT-IPm2m-113-D Red Lion Controls · VT-IPm2m-213-D Red Lion Controls · VT-mIPm-135-D Red Lion Controls · VT-mIPm-245-D

Referencias

https://support.redlion.net/hc/en-us/articles/19339209248269-RLCSIM-2023-05-Authentication-Bypass-and-Remote-Code-Execution https://www.cisa.gov/news-events/ics-advisories/icsa-23-320-01