Summary
Successful exploitation of this vulnerability could allow an attacker to inject and execute arbitrary shell commands as an Admin user.
Vulnerabilities 1
-
Critical 9.1
Ricon Mobile, Inc.
The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user.
Revision history
-
#1
ICSA-22-032-01 Ricon Mobile Industrial Cellular Router
References
-
ICS Advisory ICSA-22-032-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-032-01
-
Recommended Practices
https://riconmobile.com/contact
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B