Summary
The TMS300 CS system does not properly restrict access to endpoints, and successful exploitation of this vulnerability could allow an attacker to view and modify application settings without authenticating.
Vulnerabilities 1
-
Critical 9.8
Due to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS are vulnerable to an at…
Revision history
-
#1
Publication Date
References
-
ICS Advisory ICSA-22-256-04 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-256-04
-
Recommended Practices
https://www.kingspan.com/us/en/contact-us/
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-256-04
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf