March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – ICS: Schneider Electric Enerlin’X Com’X 510
June 18, 2021
Rewterz Threat Advisory – ICS: Siemens JT2Go Vulnerability
June 18, 2021
Rewterz Threat Advisory – ICS: Schneider Electric Enerlin’X Com’X 510
June 18, 2021
Rewterz Threat Advisory – ICS: Siemens JT2Go Vulnerability
June 18, 2021
Severity
High
Analysis Summary
CVE-2021-32956
The affected product is vulnerable to redirection, which may allow an attacker to send a maliciously crafted URL that could result in redirecting a user to a malicious webpage. Successful exploitation of this vulnerability could allow an attacker to read files outside the intended directory or redirect a user to a malicious webpage.
CVE-2021-32954
The affected product is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the file system. Successful exploitation of this vulnerability could allow an attacker to read files outside the intended directory or redirect a user to a malicious webpage.
Impact
- Relative Path Traversal
- Open Redirect
Affected Vendors
Advantech
Affected Products
WebAccess/SCADA Versions 9.0.1 and prior
Remediation
Refer to vendor advisory for the complete list of affected products and their respective patches at
https://us-cert.cisa.gov/ics/advisories/icsa-21-168-03