Remote Code Execution Vulnerability in Belden Hirschmann Tofino Xenon Security Appliance
CVE-2017-11402

9.8CRITICAL

Key Information:

Vendor

Belden

Status
Tofino Xenon Security Appliance Firmware
Vendor
CVE Published:
20 November 2017

What is CVE-2017-11402?

A security issue has been identified in the Hirschmann Tofino Xenon Security Appliance that can be exploited by attackers to remotely trigger rules on the firewall. This vulnerability is caused by design flaws in the OPC classic protocol and specific netfilter modules, enabling unauthorized access to any TCP port of secured assets, effectively circumventing the firewall's protective measures. The method of attack involves a carefully crafted dynamic port shift associated with the OPC protocol, posing significant risks to network integrity.

References

https://www.belden.com/hubfs/support/security/bulletins/B...
x_refsource_MISC
https://github.com/airbus-seclab/security-advisories/blob...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.