Description
All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ETIC Telecom | Remote Access Server (RAS) | ≤ 4.5.0 | — |
Advisories 1
- ICSA-22-307-01 ETIC Telecom Remote Access Server (RAS) (Update B) CISA ICS & IT advisories · Dec 3, 2024