Description
An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SWARCO | CPU LS4000 | Operating System G4... | — |
Advisories 2
- ICSA-20-154-06 SWARCO CPU LS4000 CISA ICS & IT advisories · Jun 2, 2020
- VDE-2020-016 SWARCO: Critical Vulnerability in CPU LS4000 CERT@VDE · May 28, 2020