Summary
Successful exploitation of these vulnerabilities could result in unauthorized changes to device configuration, to include adding new users or changing existing passwords for persistent access to the device.
Vulnerabilities 2
-
Critical 9.9
Sequi PortBloque S Improper Authorization
Sequi PortBloque S has an improper authorization vulnerability, which may allow a low-privileged user to perform administrative functions using specifically crafted requests.
-
Critical 9.6
Sequi PortBloque S Improper Authentication
Sequi PortBloque S has a improper authentication issues which may allow an attacker to bypass the authentication process and gain user-level access to the device.
Revision history
-
#1
Publication Date
References
-
ICS Advisory ICSA-22-228-07 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-228-07
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.sequi.com/support
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-228-07
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf