Skip to content
OpenAdvisories
Critical ICSA-22-102-05 5 CVEs

Aethon TUG Home Base Server

Published Apr 12, 2022 · Updated Apr 12, 2022

Vendor: Aethon, ST Engineering Product: TUG Home Base Server a server used to control and communicate with autonomous mobile robots in hospitals

Summary

Successful exploitation of these vulnerabilities could cause a denial-of-service condition, allow full control of robot functions, or expose sensitive information.

Vulnerabilities 5

  • High 8.2
    CVE-2022-1059

    CROSS-SITE SCRIPTING CWE-79

    Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

    Aethon TUG Home Base Server
  • High 8.2
    CVE-2022-1066

    MISSING AUTHORIZATION CWE-862

    Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

    Aethon TUG Home Base Server
  • High 8.2
    CVE-2022-1070

    CHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-300

    Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

    Aethon TUG Home Base Server
  • High 8.2
    CVE-2022-26423

    MISSING AUTHORIZATION CWE-862

    Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

    Aethon TUG Home Base Server
  • High 8.2
    CVE-2022-27494

    CROSS-SITE SCRIPTING CWE-79

    Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

    Aethon TUG Home Base Server

Revision history

  1. #1

    ICSA-22-102-05 Aethon TUG Base Server

References