Security News > 2020 > July > Researchers find critical RCE vulnerabilities in industrial VPN solutions
![Researchers find critical RCE vulnerabilities in industrial VPN solutions](/static/build/img/news/alt/application-stats-medium.jpg)
Critical vulnerabilities in several industrial VPN implementations for remotely accessing operational technology networks could allow attackers to overwrite data, execute malicious code or commands, cause a DoS condition, and more.
"Exploiting these vulnerabilities can give an attacker direct access to the field devices and cause some physical damage," Claroty researchers noted.
This situation has spurred the researchers to search for vulnerabilities in industrial VPN solutions used by remote operators and third-party vendors for accessing, maintaining and monitoring field controllers, programmable logic controllers and input/output devices deployed at oil and gas installations, water utilities and electric utilities.
These include Secomea's GateManager M2M Server, Moxa's industrial VPN servers with an all-in-one secure router, and HMS Networks's eCatcher VPN client.
Moxa's EDR-G902 and EDR-G903 series secure routers/VPN servers sport a stack-based buffer overflow bug that could lead to RCE. Finally, there's a stack-buffer overflow bug in HMS Networks' eCatcher, a proprietary VPN client that is used to connect to the company's eWon VPN device, which allows machine builders and factory owners to remotely monitor the performance of their equipment.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/3JhZ9IIxB7k/
Related news
- CISA warns critical Geoserver GeoTools RCE flaw is exploited in attacks (source)
- Progress warns of critical RCE bug in Telerik Report Server (source)
- Critical ServiceNow RCE flaws actively exploited to steal credentials (source)
- Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327) (source)
- Critical Apache OFBiz pre-auth RCE flaw fixed, update ASAP! (CVE-2024-38856) (source)
- Critical Progress WhatsUp RCE flaw now under active exploitation (source)
- Cisco warns of critical RCE zero-days in end of life IP phones (source)
- Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems (source)
- Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service (source)
- SolarWinds fixes critical RCE bug affecting all Web Help Desk versions (source)