Skip to content
OpenAdvisories
Critical VDE-2020-016 1 CVE

SWARCO: Critical Vulnerability in CPU LS4000

Published May 28, 2020 · Updated May 28, 2020

Vendor: SWARCO Product: CPU LS4000 Product: G4*

Summary

An open port used for debugging grants root access to the device without access control via network.

Details

Impact
A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices.

Remediation
SWARCO TRAFFIC SYSTEMS released a patch to fix the vulnerability and close the port. Please contact your SWARCO TRAFFIC SYSTEMS contact person for further information.

Vulnerabilities 1

  • Critical 10.0
    CVE-2020-12493

    Critical Vulnerability in SWARCO CPU LS4000

    An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operation…

    SWARCO CPU LS4000

Revision history

  1. #1

    Initial revision.

References