Summary
Microsoft disclosed a critical vulnerability in the way Microsoft Server Message Block 3.1.1 (SMBv3)
handles compressed connections. That may allow unauthenticated attackers to execute arbitrary code
on a vulnerable device.
Since the MEAC central emission monitoring computer (EPC) acts as a SMB server to provide MEAC
workstations with access to the filesystem in distributed MEAC-systems, the devices are affected by
this vulnerability. Exploitation of this vulnerability could lead to remote code execution under login with
administrator privileges.
Vulnerabilities 1
-
Critical 10.0
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …
KEV Feb 10, 2022
Revision history
-
#3
Updated Advisory: URL for SICK Operating Guidelines has been updated
-
#2
Updated Advisory (only visual changes)
-
#1
Initial Release
References
-
SICK PSIRT Security Advisories
https://sick.com/psirt
-
SICK Operating Guidelines
https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
-
ICS-CERT recommended practices on Industrial Security
http://ics-cert.us-cert.gov/content/recommended-practices
-
CVSS v3.1 Calculator
https://www.first.org/cvss/calculator/3.1