Summary
Successful exploitation of these vulnerabilities may allow an attacker to bypass authentication in the communications connection process to login and operate the controller products without authorization.
Vulnerabilities 2
-
Critical 9.4
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and ear…
-
Unscored —
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.…
Revision history
-
#1
Publication Date
References
-
ICS Advisory ICSA-22-314-08 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-314-08
-
Recommended Practices
https://www.cisa.gov/uscert/ncas/alerts/aa22-103a
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-314-08
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf