CVE-2024-23767

Summary

An issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3. The HICP protocol allows unauthenticated changes to a device's network configurations.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://github.com/claire-lex/anybus-hicp/blob/main/hicp_config.py

CVE Program Container

Additional References

• https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/

References

• https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/

• ←Previous
• Next→