ICSA-20-135-02 — Emerson WirelessHART Gateway

Summary

Successful exploitation of this vulnerability could disable the internal gateway firewall. Once the gateway's firewall is disabled, a malicious user could issue specific commands to the gateway, which could then be forwarded on to the end user's wireless devices.

Vulnerabilities 1

Critical 10.0

CVE-2020-12030

Emerson WirelessHART Gateway

There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. If a user enables the VLAN setting, the internal gateway firewall becomes disabled resulting in exposure of all ports used by the gateway.

Emerson Wireless 1420 Gateway Wireless 1410 Gateway Wireless 1552WU Gateway

Sep 29, 2021

Revision history

2020-05-14 #1
ICSA-20-135-02 Emerson WirelessHART Gateway

References

ICS Advisory ICSA-20-135-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-135-02
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B