Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package Library

Impact
Successful exploitation may allow unauthorized activation of the debug interface and subsequent remote use of the iDTM, potentially resulting in unauthorized access to connected devices and exposure, modification, or disruption of device data or operation.

Mitigation
If an immediate update is not possible, Endress+Hauser recommends the following measures to reduce the risk of exploitation:
* Restrict access to affected systems to authorized personnel only
* Apply the principle of least privilege and limit administrative access to trusted users.
* Protect application installation directories against unauthorized modification through appropriate operating system access controls.

Following these recommendations reduces the risk of unauthorized activation.

Remediation
Endress+Hauser provides an updated version of FDI Package library V2.02.00 that addresses this vulnerability. Endress+Hauser strongly recommends that customers update to the latest fixed version. For support, please contact your local service center.