CVE-2022-3703: Insufficient Verification of Data Authenticity

All versions of ETIC Telecom Remote Access Server RAS 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device...

CISA Warns of Critical Vulnerabilities in 3 Industrial Control System Software

The U.S. Cybersecurity and Infrastructure Security Agency CISA has published three Industrial Control Systems ICS advisories about multiple vulnerabilities in software from ETIC Telecom, Nokia, and Delta Industrial Automation. Prominent among them is a set of three flaws affecting ETIC Telecom's...

ETIC Telecom Remote Access Server 代码问题漏洞

ETIC Telecom Remote Access Server is a remote maintenance solution from the French company ETIC Telecom. It is designed to enable manufacturers to remotely maintain automated equipment. A code issue vulnerability exists in ETIC Telecom Remote Access Server version 4.5.0 and prior versions. An...

ETIC Telecom Remote Access Server 路径遍历漏洞

ETIC Telecom Remote Access Server is a remote maintenance solution from the French company ETIC Telecom. It is designed to enable manufacturers to remotely maintain automated equipment. A path traversal vulnerability exists in ETIC Telecom Remote Access Server version 4.5.0 and prior versions. An...

ETIC Telecom Remote Access Server 数据伪造问题漏洞

ETIC Telecom Remote Access Server is a remote maintenance solution from the French company ETIC Telecom. It is designed to enable manufacturers to maintain automated equipment remotely. A data forgery vulnerability exists in ETIC Telecom Remote Access Server RAS version 4.5.0 and prior versions,...

ETIC Telecom Remote Access Server (RAS) (Update B)

1. EXECUTIVE SUMMARY --------- Begin Update A Part 1 of 5 --------- CVSS v3 7.6 ATTENTION: Exploitable remotely/low attack complexity --------- End Update A Part 1 of 5 --------- Vendor: ETIC Telecom Equipment: Remote Access Server RAS Vulnerabilities: Insufficient Verification of Data...