Orpak SiteOmat ICSA-19-122-01 Multiple Security Vulnerabilities

Bugtraq ID:	108167
Class:	Design Error
CVE:	CVE-2017-14854 CVE-2017-14853 CVE-2017-14852 CVE-2017-14851 CVE-2017-14850 CVE-2017-14728
Remote:	Yes
Local:	No
Published:	May 02 2019 12:00AM
Updated:	May 02 2019 12:00AM
Credit:	Ido Naor of Kaspersky Lab
Vulnerable:	Orpak Systems SiteOmat 0
Not Vulnerable:	Orpak Systems SiteOmat 6.4.414.139 Orpak Systems SiteOmat 6.4.414.122 Orpak Systems SiteOmat 6.4.414.084

Orpak SiteOmat ICSA-19-122-01 Multiple Security Vulnerabilities

Orpak SiteOmat is prone to multiple security vulnerabilities.

Successfully exploiting these issues allows attackers to gain unauthorized access, gain sensitive information, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary code in the context of the affected device. Failed exploit attempts will result in denial-of-service conditions.

Orpak SiteOmat ICSA-19-122-01 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Orpak SiteOmat ICSA-19-122-01 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Orpak SiteOmat ICSA-19-122-01 Multiple Security Vulnerabilities

References:

• SiteOmat Productpage ()
  
• Advisory (ICSA-19-122-01) Orpak SiteOmat (ICS CERT)