btaace.blogg.se - Feed us 4 find the black box

Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the Internet.Black Box KVM ACR1020A-T: Update to firmware v3.6 or laterīlack Box recommends users seek advice from third-party equipment or software package(s) vendors to evaluate if this vulnerability impacts third-party equipment/software.ĬISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability.Black Box KVM ACR1002A-R: Update to firmware v3.6 or later.Black Box KVM ACR1002A-T: Update to firmware v3.6 or later.Black Box KVM ACR1000A-T-R2: Update to firmware v3.6 or later.Black Box KVM ACR1000A-R-R2: Update to firmware v3.6 or later.MITIGATIONSīlack Box has provided an update to the firmware to mitigate this vulnerability and recommends all users update products to the latest versions:

CRITICAL INFRASTRUCTURE SECTORS: MultipleĬISA discovered a public Proof of Concept (PoC) as authored by Ferhat Çil and reported it to Black Box.

A CVSS v3 base score of 7.5 has been assigned the CVSS vector string is ( AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Black Box KVM ACR1020A-T: Firmware version v7ģ.2.1 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22īlack Box KVM Firmware version 7 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sensitive information through local file inclusion.ĬVE-2022-4636 has been assigned to this vulnerability.

Black Box KVM ACR1002A-R: Firmware version v7.

Black Box KVM ACR1002A-T: Firmware version v7.

Black Box KVM ACR1000A-T-R2: Firmware version v7.

Black Box KVM ACR1000A-R-R2: Firmware version v7.The following models and versions of Black Box KVMs, a Keyboard/Video/Mouse switch and extender, are affected: Successful exploitation of this vulnerability could allow an attacker to read sensitive data on the built-in web servers of the affected devices.

ATTENTION: Low attack complexity/public exploits are available.