Design/Logic Flaw

2021-09-2920:15:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

JSON

There is a flaw in the code used to configure the internal gateway firewall when the gateway’s VLAN feature is enabled. If a user enables the VLAN setting, the internal gateway firewall becomes disabled resulting in exposure of all ports used by the gateway.

CPENameOperatorVersion
wireless_1410_gateway_firmwarege4.6.43
wireless_1410_gateway_firmwarele4.7.84
wireless_1420_gateway_firmwarege4.6.43
wireless_1420_gateway_firmwarele4.7.84
wireless_1552wu_gateway_firmwarege4.6.43
wireless_1552wu_gateway_firmwarele4.7.84

Name	Operator	Version
wireless_1410_gateway_firmware	ge	4.6.43
wireless_1410_gateway_firmware	le	4.7.84
wireless_1420_gateway_firmware	ge	4.6.43
wireless_1420_gateway_firmware	le	4.7.84
wireless_1552wu_gateway_firmware	ge	4.6.43
wireless_1552wu_gateway_firmware	le	4.7.84

References

us-cert.cisa.gov/ics/advisories/icsa-20-135-02