Avtec Outpost 0810

Summary

Vulnerabilities 2

• High 7.5
  CVE-2024-39776

  Avtec Outpost Storage of File with Sensitive Data Under Web Root

  Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.

  Avtec Outpost 0810 Outpost Uploader Utility
  Aug 22, 2024
• High 7.5
  CVE-2024-42418

  Avtec Outpost Use of Hard-coded Cryptographic Key

  Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information.

  Avtec Outpost Uploader Utility Outpost 0810
  Aug 22, 2024

Revision history

1. 2024-08-22 #1

   Initial Publication

References

• ICSA Advisory ICSA-24-235-04 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-235-04
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014