Summary
Successful exploitation of these vulnerabilities could allow an attacker to take remote control of the product.
Vulnerabilities 5
-
Critical 9.9
SDM600 file permission validation
A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing. This iss…
-
High 7.7
SDM600 API web services authorization validation
A vulnerability exists in the SDM600 API web services authorization validation implementation. An attacker who successfully exploits the vulnerability could read data directly from a data store that is not restricted, or insufficiently protected, having acces…
-
High 7.5
SDM600 endpoint vulnerability
A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior to versi…
-
High 7.5
SDM600 software privilege level
A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minimum level required. An attacker who successfully exploits this vulnerability can escalate privileges. This issue affects: All SDM600 versions…
-
Medium 4.8
SDM600 API permission check
A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior to versi…
Revision history
-
#1
CSAF Creation Date
References
-
ICS Advisory ICSA-23-096-05 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-05
-
Recommended Practices
https://us-cert.cisa.gov/ics/Recommended-Practices
-
Recommended Practices
https://cisa.gov/ics