RSS   Vulnerabilities for
'Tofino xenon security appliance firmware'
   RSS

2017-11-20
 
CVE-2017-11402

CWE-20
 

 
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift.

 
 
CVE-2017-11401

CWE-noinfo
 

 
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.

 
 
CVE-2017-11400

CWE-347
 

 
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned.

 

 >>> Vendor: Belden 139 Products
Hirschmann l2b
Hirschmann firmware
Tofino xenon security appliance firmware
Hirschmann m1-8mm-sc
Hirschmann m1-8sfp
Hirschmann m1-8sm-sc
Hirschmann m1-8tp-rj45
Hirschmann mach102-24tp-f
Hirschmann mach102-24tp-fr
Hirschmann mach102-8tp
Hirschmann mach102-8tp-f
Hirschmann mach102-8tp-fr
Hirschmann mach102-8tp-r
Hirschmann mach104-16tx-poep
Hirschmann mach104-16tx-poep-l3p
Hirschmann mach104-16tx-poep +2x
Hirschmann mach104-16tx-poep +2x-l3p
Hirschmann mach104-16tx-poep +2x -e
Hirschmann mach104-16tx-poep +2x -e-l3p
Hirschmann mach104-16tx-poep +2x -r
Hirschmann mach104-16tx-poep +2x -r-l3p
Hirschmann mach104-16tx-poep -e
Hirschmann mach104-16tx-poep -e-l3p
Hirschmann mach104-16tx-poep -r
Hirschmann mach104-16tx-poep -r-l3p
Hirschmann mach104-20tx-f
Hirschmann mach104-20tx-f-4poe
Hirschmann mach104-20tx-f-l3p
Hirschmann mach104-20tx-fr
Hirschmann mach104-20tx-fr-l3p
Hirschmann mach4002-24g+3x-l2p
Hirschmann mach4002-24g+3x-l3e
Hirschmann mach4002-24g+3x-l3p
Hirschmann mach4002-24g-l2p
Hirschmann mach4002-24g-l3e
Hirschmann mach4002-24g-l3p
Hirschmann mach4002-48g+3x-l2p
Hirschmann mach4002-48g+3x-l3e
Hirschmann mach4002-48g+3x-l3p
Hirschmann mach4002-48g-l2p
Hirschmann mach4002-48g-l3e
Hirschmann mach4002-48g-l3p
Hirschmann ms20-0800eccp
Hirschmann ms20-0800saae
Hirschmann ms20-0800saap
Hirschmann ms20-1600eccp
Hirschmann ms20-1600saae
Hirschmann ms20-1600saap
Hirschmann ms30-0802saae
Hirschmann ms30-0802saap
Hirschmann ms30-1602saae
Hirschmann octopus 16m
Hirschmann octopus 16m-8poe
Hirschmann octopus 16m-train
Hirschmann octopus 16m-train-bp
Hirschmann octopus 24m
Hirschmann octopus 24m-8 poe
Hirschmann octopus 24m-train
Hirschmann octopus 24m-train-bp
Hirschmann octopus 5tx eec
Hirschmann octopus 8m
Hirschmann octopus 8m-6poe
Hirschmann octopus 8m-8poe
Hirschmann octopus 8m-train
Hirschmann octopus 8m-train-bp
Hirschmann octopus 8tx-eec
Hirschmann octopus 8tx poe-eec
Hirschmann octopus os20-000900t5t5tafbhh
Hirschmann octopus os20-000900t5t5tnebhh
Hirschmann octopus os20-0010001m1mtrephh
Hirschmann octopus os20-0010001s1strephh
Hirschmann octopus os20-0010004m4mtrephh
Hirschmann octopus os20-0010004s4strephh
Hirschmann octopus os20-001000t5t5tafuhb
Hirschmann octopus os20-001000t5t5tneuhb
Hirschmann octopus os24-080900t5t5tffbhh
Hirschmann octopus os24-080900t5t5tnebhh
Hirschmann octopus os24-081000t5t5tffuhb
Hirschmann octopus os24-081000t5t5tneuhb
Hirschmann octopus os30
Hirschmann octopus os30-0008021a1atrephh
Hirschmann octopus os30-0008021b1btrephh
Hirschmann octopus os30-0008024a4atrephh
Hirschmann octopus os30-0008024b4btrephh
Hirschmann octopus os32-080802o6o6tpephh
Hirschmann octopus os32-080802t6t6tpephh
Hirschmann octopus os32-081602o6o6tpephh
Hirschmann octopus os32-081602t6t6tpephh
Hirschmann octopus os34
Hirschmann octopus os3x-xx16xxx
Hirschmann octopus os3x-xx24xxx
Hirschmann rs20-0900mmm2tdau
Hirschmann rs20-0900nnm4tdau
Hirschmann rs20-0900vvm2tdau
Hirschmann rs20-1600l2l2sdau
Hirschmann rs20-1600l2m2sdau
Hirschmann rs20-1600l2s2sdau
Hirschmann rs20-1600l2t1sdau
Hirschmann rs20-1600m2m2sdau
Hirschmann rs20-1600m2t1sdau
See all Products for Vendor Belden


Copyright 2024, cxsecurity.com

 

Back to Top