Security News > 2020 > July > Researchers find critical RCE vulnerabilities in industrial VPN solutions
Critical vulnerabilities in several industrial VPN implementations for remotely accessing operational technology networks could allow attackers to overwrite data, execute malicious code or commands, cause a DoS condition, and more.
"Exploiting these vulnerabilities can give an attacker direct access to the field devices and cause some physical damage," Claroty researchers noted.
This situation has spurred the researchers to search for vulnerabilities in industrial VPN solutions used by remote operators and third-party vendors for accessing, maintaining and monitoring field controllers, programmable logic controllers and input/output devices deployed at oil and gas installations, water utilities and electric utilities.
These include Secomea's GateManager M2M Server, Moxa's industrial VPN servers with an all-in-one secure router, and HMS Networks's eCatcher VPN client.
Moxa's EDR-G902 and EDR-G903 series secure routers/VPN servers sport a stack-based buffer overflow bug that could lead to RCE. Finally, there's a stack-buffer overflow bug in HMS Networks' eCatcher, a proprietary VPN client that is used to connect to the company's eWon VPN device, which allows machine builders and factory owners to remotely monitor the performance of their equipment.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/3JhZ9IIxB7k/
Related news
- Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw (source)
- Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519) (source)
- Critical Zimbra RCE flaw exploited to backdoor servers using emails (source)
- CISA: Network switch RCE flaw impacts critical infrastructure (source)
- Critical Ivanti RCE flaw with public exploit now used in attacks (source)
- Week in review: Critical Zimbra RCE vulnerability exploited, Patch Tuesday forecast (source)
- Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited (source)
- Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries (source)
- CISA says critical Fortinet RCE flaw now exploited in attacks (source)
- Akira and Fog ransomware now exploit critical Veeam RCE flaw (source)