Summary
An unauthenticated user could use a malicious request to run arbitrary commands as root user.
Vulnerabilities 1
-
Critical 10.0
iSTAR Ultra
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
Revision history
-
#1
Publication Date
References
-
ICS Advisory ICSA-22-242-11 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-242-11
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-242-11
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf