CVE-2020-12030CWE-284

Emerson WirelessHART Gateway

Critical · published September 29, 2021

CVSS v3.1
10.0
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

🚨 Enabling the VLAN feature may cause the internal gateway firewall to go to sleep on the job! 🔥 Think of it like a security guard who's supposed to monitor an entrance but falls asleep as soon as you change the building layout. Every door remains wide open, making it easy for anyone to stroll in unchallenged! An attacker could exploit this flaw to access all ports on the gateway without any resistance from the firewall, leading to a total compromise of network security. Imagine the chaos when unauthorized users have free rein inside your network!

Put simply

Think of it like a security guard who's supposed to monitor an entrance but falls asleep as soon as you change the building layout. Every door remains wide open, making it easy for anyone to stroll in unchallenged! CVE-2020-12030 involves a misconfiguration where enabling the VLAN feature disables the internal gateway firewall, leaving all connected ports exposed.

What to do

An attacker could exploit this flaw to access all ports on the gateway without any resistance from the firewall, leading to a total compromise of network security. Imagine the chaos when unauthorized users have free rein inside your network! To mitigate this vulnerability, ensure that the VLAN feature is only enabled if absolutely necessary. Regularly audit your gateway configurations and apply patches as soon as they are available. Stay vigilant and monitor for any unusual activity within your network! You can tackle this! Follow these steps to fortify your defenses and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01131 · 66.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-09-29T19:36Z
EPSS history
Timeline
  • 29 SEP 19:36Z
    Emerson WirelessHART Gateway
    cvelistv5