Critical Bugs in Utilities VPNs Could Cause Physical Damage

🗓️ 29 Jul 2020 18:02:03Reported by Tara SealsType

threatpost🔗 threatpost.com👁 166 Views

Critical Bugs in Utilities VPN

Reporter	Title	Published	Views	Family All 66
ATTACKERKB	Remote Code Execution Vulnerabilities in Secomea, Moxa, and HMS eWon VPNs	21 Dec 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-14511	15 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-14500	31 Jul 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of Moxa EDR-G902 and Moxa EDR-G903 router microprogramming software lies in buffer overflow in the stack, allowing attackers to execute arbitrary code.	20 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GateManager communication server, related to pointer assignment errors, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GateManager communication server, related to a single shift error, allows a perpetrator to execute arbitrary code or cause a service failure.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the communication server GateManager is related to a single shift error, which allows an attacker to execute arbitrary commands on behalf of the user root.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HMS Industrial Networks AB eCatcher network software, caused by buffer overflow in the stack, allows a hacker to execute arbitrary code.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GateManager communication server, related to insufficient calculation of password hashes, allows attackers to view user passwords.	5 May 202100:00	–	bdu_fstec
Circl	CVE-2020-14498	29 Jul 202013:18	–	circl

Source	Link
threatpost	www.threatpost.com/newsletter-sign/
kb	www.kb.secomea.com/helpdesk/KB/View/29329790-secomea-gatemanager--release-c
kb	www.kb.secomea.com/helpdesk/KB/View/29329861-secomea-gatemanager--release-i
moxa	www.moxa.com/en/support/product-support/software-and-documentation/search
moxa	www.moxa.com/en/support/product-support/software-and-documentation/search
ewon	www.ewon.biz/technical-support/pages/all-downloads
threatpost	www.threatpost.com/nsa-urgent-warning-industrial-cyberattacks-triconex/157723/
threatpost	www.threatpost.com/triton-malware-targets-industrial-control-systems-in-middle-east/129182/
attendee	www.attendee.gotowebinar.com/register/3844090971254297614
attendee	www.attendee.gotowebinar.com/register/3844090971254297614

29 Jul 2020 18:02Current

0.9Low risk

Vulners AI Score0.9

EPSS0.02905

remote code-execution industrial systems security vulnerabilities remote-access solutions physical damage critical infrastructure claroty network cloud-based cybercriminals cve-2020-14500 cve-2020-14508 cve-2020-14510 cve-2020-14512 patches moxa edr-g902/3