Kieback&Peter DDC4000 Series

🗓️ 17 Oct 2024 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 13 Views

Kieback&Peter DDC4000 series controllers are vulnerable to path traversal, insufficiently protected credentials, and weak credentials, which may allow unauthorized access. Users are advised to update to supported controllers, separate older controllers, and update firmware

Reporter	Title	Published	Views	Family All 23
Circl	CVE-2024-41717	17 Oct 202412:00	–	circl
Circl	CVE-2024-43698	17 Oct 202412:00	–	circl
Circl	CVE-2024-43812	17 Oct 202412:00	–	circl
CNNVD	Kieback&Peter DDC4000 路径遍历漏洞	22 Oct 202400:00	–	cnnvd
CNNVD	Kieback&Peter DDC4000 安全漏洞	22 Oct 202400:00	–	cnnvd
CNNVD	Kieback&Peter DDC4000 安全漏洞	22 Oct 202400:00	–	cnnvd
CVE	CVE-2024-41717	22 Oct 202421:13	–	cve
CVE	CVE-2024-43698	22 Oct 202421:23	–	cve
CVE	CVE-2024-43812	22 Oct 202421:19	–	cve
Cvelist	CVE-2024-41717 Kieback&Peter DDC4000 Series Path Traversal	22 Oct 202421:13	–	cvelist

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-291-05.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-291-05
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

17 Oct 2024 06:00Current

8.3High risk

Vulners AI Score8.3

CVSS 49.3

CVSS 3.19.8

EPSS0.00827

SSVC