OPW Fuel Management Systems SiteSentinel

Summary

Vulnerabilities 1

• Critical 9.8
  CVE-2024-8310

  OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function

  OPW Fuel Management Systems SiteSentinel could allow an attacker to bypass authentication to the server and obtain full admin privileges.

  OPW Fuel Managements Systems SiteSentinel
  Sep 27, 2024

Revision history

1. 2024-09-24 #1

   Initial Publication

References

• ICSA Advisory ICSA-24-268-01 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014