LenelS2 NetBox

🗓️ 30 May 2024 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 58 Views

LenelS2 NetBox access control and event monitoring system containing hard-coded password and remote code execution vulnerabilities, affecting versions prior to 5.6.2. Exploitation could lead to unauthorized access and elevated privilege execution.

Reporter	Title	Published	Views	Family All 33
BDU FSTEC	LenelS2 NetBox Access Control Command Execution	7 Jun 202400:00	–	bdu_fstec
BDU FSTEC	LenelS2 NetBox Command Injection	7 Jun 202400:00	–	bdu_fstec
BDU FSTEC	LenelS2 NetBox Authentication Bypass	7 Jun 202400:00	–	bdu_fstec
CNNVD	NetBox Security Vulnerability	30 May 202400:00	–	cnnvd
CNNVD	NetBox Security Vulnerability	30 May 202400:00	–	cnnvd
CNNVD	NetBox Security Vulnerability	30 May 202400:00	–	cnnvd
CVE	CVE-2024-2420	30 May 202417:22	–	cve
CVE	CVE-2024-2421	30 May 202417:24	–	cve
CVE	CVE-2024-2422	30 May 202417:26	–	cve
Cvelist	CVE-2024-2420 LenelS2 NetBox Hardcoded Credentials	30 May 202417:22	–	cvelist

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-151-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-151-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

30 May 2024 06:00Current

8.4High risk

Vulners AI Score8.4

CVSS 3.19.8

CVSS 49.3

EPSS0.00523

SSVC