AUMA Riester: Buffer overflow in service telegram

Impact
A buffer overflow can lead to an unexpected behaviour e.g. to restart of the actuator controls.

Mitigation
As the Bluetooth interface or the alternatively available RS-232 interface is not required for normal operation, it is advisable to only activate it or only use it when it is required, e.g. when configuring the actuator or reading diagnostic data. It should be deactivated under normal operation conditions.

Remediation
For actuators with Bluetooh, it is recommended to update the firmware of the actuator controls to a new version in order to avoid a buffer overflow.
For actuators without Bluetooth, it is recommended to restrict physical access to the actuator and/or update the firmware if possible.

Product Description
Applies to all actuators which can be configured using either a Bluetooth interface or a RS-232 interface.