Security News > 2020 > July > Researchers find critical RCE vulnerabilities in industrial VPN solutions
Critical vulnerabilities in several industrial VPN implementations for remotely accessing operational technology networks could allow attackers to overwrite data, execute malicious code or commands, cause a DoS condition, and more.
"Exploiting these vulnerabilities can give an attacker direct access to the field devices and cause some physical damage," Claroty researchers noted.
This situation has spurred the researchers to search for vulnerabilities in industrial VPN solutions used by remote operators and third-party vendors for accessing, maintaining and monitoring field controllers, programmable logic controllers and input/output devices deployed at oil and gas installations, water utilities and electric utilities.
These include Secomea's GateManager M2M Server, Moxa's industrial VPN servers with an all-in-one secure router, and HMS Networks's eCatcher VPN client.
Moxa's EDR-G902 and EDR-G903 series secure routers/VPN servers sport a stack-based buffer overflow bug that could lead to RCE. Finally, there's a stack-buffer overflow bug in HMS Networks' eCatcher, a proprietary VPN client that is used to connect to the company's eWon VPN device, which allows machine builders and factory owners to remotely monitor the performance of their equipment.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/3JhZ9IIxB7k/
Related news
- Hackers exploit critical Aviatrix Controller RCE flaw in attacks (source)
- Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks (source)
- SAP fixes critical vulnerabilities in NetWeaver application servers (source)
- Critical vulnerabilities remain unresolved due to prioritization gaps (source)
- Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager (source)
- Critical SimpleHelp vulnerabilities fixed, update your server instances! (source)
- Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation (source)
- Netgear warns users to patch critical WiFi router vulnerabilities (source)
- Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc (source)
- Critical RCE bug in Microsoft Outlook now exploited in attacks (source)