Secheron SEPCOS Control and Protection Relay

🗓️ 23 Jun 2022 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 233 Views

Secheron SEPCOS Control and Protection Relay vulnerabilities with root access ris

Reporter	Title	Published	Views	Family All 72
BDU FSTEC	The vulnerability of the SEPCOS Single Package software for the Secheron SEPCOS control and protection relays allows a intruder to disclose protected information.	11 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SEPCOS Single Package software for the Secheron SEPCOS control and protection relay allows a hacker to elevate their privileges to the level of a superuser.	11 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SEPCOS Single Package control and protection relay software allows a intruder to modify user credentials and permissions without authentication.	13 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SEPCOS Single Package control and protection system, allowing a hacker to read confidential files and write to remotely executable directories.	13 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the loader for microprogramming software SEPCOS Single Package relay controllers and Secheron SEPCOS systems allows a hacker to load arbitrary files.	13 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SEPCOS Single Package control and protection system from Secheron SEPCOS allows a intruder to trigger a system reboot.	13 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SEPCOS Single Package software in the Secheron SEPCOS control and protection relay system allows a intruder to enhance their privileges.	13 Jul 202200:00	–	bdu_fstec
Circl	CVE-2022-1666	24 Jun 202218:31	–	circl
Circl	CVE-2022-1668	24 Jun 202218:31	–	circl
Circl	CVE-2022-2102	24 Jun 202218:31	–	circl

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-174-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-22-174-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

23 Jun 2022 00:00Current

9.8High risk

Vulners AI Score9.8

CVSS 210

CVSS 3.19.8 - 9.9

EPSS0.00524

SSVC

cvss v3 9.9 exploitable remotely vendor secheron sepcos control vulnerabilities improper enforcement lack of administrator control improper privilege management insufficiently protected credentials