Summary
Successful exploitation of this vulnerability could allow an attacker to inject malicious maintenance requests by exploiting improper certification validation. An attacker could exploit this vulnerability by sending statistics, activating remote support, exchanging the initial keys when onboarding, querying new extensions, or accessing sensitive data.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in Industrial Edge Management (All versions < V1.5.1). The affected software does n…
Revision history
-
#1
Publication Date
References
-
ICS Advisory ICSA-22-286-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-286-02
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-286-02
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf