OMNTEC Proteus Tank Monitoring (Update A)

Summary

Vulnerabilities 1

• Critical 9.8
  CVE-2024-6981

  OMNTEC Proteus Tank Monitoring Missing Authentication for Critical Function

  OMNTEC Proteus Tank Monitoring OEL8000III Series could allow an attacker to perform administrative actions without proper authentication.

  OMNTEC Proteus Tank Monitoring
  Sep 27, 2024

Revision history

1. 2024-10-24 #2

   Update A - Added vendor mitigations and details to the affected product section

2. 2024-09-24 #1

   Initial Publication

References

• ICSA Advisory ICSA-24-268-06 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-06
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B