High ICSA-18-296-02 3 CVEs

GAIN Electronic Co. Ltd SAGA1-L Series

Published Oct 23, 2018 · Updated Oct 23, 2018

Vendor: GAIN Electronic Product: SAGA1-L8B

Summary

Successful exploitation of these vulnerabilities could allow remote code execution and potentially delete the product 's firmware.

Vulnerabilities 3

Unscored —

CVE-2018-17903

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.

GAIN Electronic SAGA1-L8B

Oct 24, 2018
Unscored —

CVE-2018-17921

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an attacker to force-pai…

GAIN Electronic SAGA1-L8B

Oct 24, 2018
Unscored —

CVE-2018-17923

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access t…

GAIN Electronic SAGA1-L8B

Oct 24, 2018

Revision history

2018-10-23 #1
ICSA-18-296-02 GAIN Electronic Co. Ltd SAGA1-L Series

References

ICS Advisory ICSA-18-296-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-296-02
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-296-02
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B