Summary
Critical vulnerabilities has been discovered in the product, mainly caused by ananonymous FTP server and Telnet access.The impact of the vulnerabilities on the affected device may result in
Information disclosure
Denial of service
Device manipulation
Details
Impact
Pepperl+Fuchs analyzed and identified affected devices.
An attacker can
read out images, serial number of the device, version numbers of firmware and OS log-files, configuration
stop processes,
read out, delete and change data.
Mitigation
An external protective measure is required.
Minimize network exposure for affected products and ensure that they are not accessible via the Internet.
Isolate affected products from the corporate network.
If remote access is required, use secure methods such as virtual private networks (VPNs).
Vulnerabilities 2
-
Critical 9.8
Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access
An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.
-
High 7.5
Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products
An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service.
Revision history
-
#1.1.0
Update: CWE from CVE-2024-6421, Revision History
-
#1.0.0
Initial revision.
References
-
VDE-2024-038: Pepperl+Fuchs: Anonymous FTP server and Telnet access allows information disclosure and manipulation - HTML
https://certvde.com/en/advisories/VDE-2024-038/
-
Pepperl+Fuchs PSIRT
https://www.pepperl-fuchs.com/de-de/support/benachrichtigungen-und-updates/cybersecurity-information-and-reporting-gp43254
-
CERT@VDE Security Advisories for Pepperl+Fuchs SE
https://certvde.com/en/advisories/vendor/pepperl-fuchs/