Description
Kaleris NAVIS N4 ULC (Ultra Light Client) communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kaleris | Navis N4 | < 4.0 | 4.0 |
Advisories 1
- ICSA-25-175-01 Kaleris Navis N4 Terminal Operating System CISA ICS & IT advisories · Jun 24, 2025
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-01 government-resource