Summary
Successful exploitation of these vulnerabilities could allow an attacker to execute remote code through input injection, or allow an attacker to view the file structure of the affected device and access files that should be inaccessible.
Vulnerabilities 2
-
Unscored —
SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The software does not neutralize or incorrectly neutralizes user-cont…
-
Unscored —
SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A specially crafted request could allow an attacker to view the file …
Revision history
-
#1
ICSA-20-126-02 SAE IT-systems FW-50 Remote Telemetry Unit (RTU)
References
-
ICSA Advisory ICSA-20-126-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-126-02
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B