CVE-2020-12493CWE-284

Critical Vulnerability in SWARCO CPU LS4000

Critical · published May 29, 2020

CVSS v3.1
10.0
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

🚨 An open debugging port could hand over root access to SWARCO's CPU LS4000 Series devices like a spare key left under the mat! 🔥 Imagine a restaurant where anyone can stroll into the kitchen and change the menu without any checks — that’s what having an open port does for these devices! An attacker can gain complete control over the device, disrupting vital operations that rely on it. This could lead to severe outages or mismanagement of connected devices, wreaking havoc on systems that many depend on!

Put simply

Imagine a restaurant where anyone can stroll into the kitchen and change the menu without any checks — that’s what having an open port does for these devices! This vulnerability allows unauthorized access through an open port intended for debugging, which lacks any access control measures, compromising the entire system.

What to do

An attacker can gain complete control over the device, disrupting vital operations that rely on it. This could lead to severe outages or mismanagement of connected devices, wreaking havoc on systems that many depend on! Immediately restrict network access to the debugging port and apply the latest firmware update provided by SWARCO to secure this vulnerability. Implement network segmentation to limit exposure and monitor traffic for any suspicious activity! You've got this! By following these steps, you'll strengthen your defenses and keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01403 · 72.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-05-29T17:27Z
EPSS history
Timeline
  • 29 MAY 17:27Z
    Critical Vulnerability in SWARCO CPU LS4000
    cvelistv5