Assured Telematics Inc (ATI) Fleet Management System (Update A)

Summary

Vulnerabilities 1

• High 8.7
  CVE-2025-4364

  Exposure of Sensitive System Information to an Unauthorized Control Sphere

  The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain administrative credentials.

  Assured Telematics Fleet Management System
  May 20, 2025

Revision history

1. 2025-06-10 #2

   Update A

2. 2025-05-20 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-140-11 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-11
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014