Vulnerability Found in Industrial Remote Access Product From Claroty

guest · Jul 2, 2021

Vulnerability Found in Industrial Remote Access Product From Claroty
July 1, 2021
https://www.securityweek.com/vulnerability-found-industrial-remote-access-product-claroty

A patch has been available since April and the risk of exploitation in the wild is low, but the flaw is noteworthy as it’s not often that we hear of vulnerabilities in the products of ICS cybersecurity companies.

The vulnerability was discovered by the Alpha Strike Labs research unit at Austria-based operational technology (OT) security company Limes Security. Its existence was brought to light this week by Limes Security and the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
Click to expand...

Claroty SRA is a secure remote access solution specifically built for OT environments, including in terms of operational, administrative and security needs.

Alpha Strike researchers discovered that an attacker with access to the targeted system can bypass access controls for the central configuration file of the SRA software.

“Successful exploitation of this vulnerability allows an attacker with local command line interface access to gain the secret key, subsequentially allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation,” CISA explained in its advisory.
Click to expand...

Log in or Sign up

Vulnerability Found in Industrial Remote Access Product From Claroty

guest Guest

Log in or Sign up

Vulnerability Found in Industrial Remote Access Product From Claroty

guest Guest

Useful Searches