Entes EMG 12

🗓️ 02 Oct 2018 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 518 Views

Vulnerabilities in Entes EMG 12 Ethernet Modbus Gateway Firmware Version 2.57 and prior, including Improper Authentication and Information Exposure Through Query Strings in GET Request, may allow unauthorized access and configuration changes. Critical Infrastructure sectors: Critical Manufacturing, Energy. Company headquarters in Turkey. Mitigation: Update firmware, minimize network exposure, use secure remote access methods

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the web interface of the EMG12 Ethernet Modbus Gateway allows a intruder to execute arbitrary code.	16 Oct 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web interface of the EMG12 Ethernet Modbus Gateway allows a intruder to execute arbitrary code.	16 Oct 201800:00	–	bdu_fstec
CVE	CVE-2018-14822	2 Oct 201821:00	–	cve
CVE	CVE-2018-14826	2 Oct 201821:00	–	cve
Cvelist	CVE-2018-14822	2 Oct 201821:00	–	cvelist
Cvelist	CVE-2018-14826	2 Oct 201821:00	–	cvelist
EUVD	EUVD-2018-6706	7 Oct 202500:30	–	euvd
NVD	CVE-2018-14822	2 Oct 201821:29	–	nvd
NVD	CVE-2018-14826	2 Oct 201821:29	–	nvd
OSV	CVE-2018-14826	2 Oct 201821:29	–	osv

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsa-18-275-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-18-275-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

02 Oct 2018 00:00Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 39.8

EPSS0.23344