Positron Broadcast Signal Processor

Summary

Vulnerabilities 1

• High 8.7
  CVE-2024-7007

  Authentication Bypass Using an Alternate Path or Channel in Positron Broadcast Signal Processor TRA7005

  Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application.

  Positron S.R.L Broadcast Signal Processor TRA7005
  Jul 25, 2024

Revision history

1. 2024-07-25 #1

   Initial Publication

References

• ICSA Advisory ICSA-24-207-02 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014