CVE-2023-24845CWE-684

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803…

Critical · published August 8, 2023

CVSS v3.1
9.1
EPSS
1%
Percentile
52.3
In the wild
Unconfirmed
What it is

🚨 A sneaky oversight lets attackers send malicious packets right through a mirror port into your network! 🔥 Think of it like a glass wall in a restaurant where patrons can see into the kitchen, but instead of just watching, someone could actually influence the chefs' actions! This vulnerability could allow an attacker to manipulate systems in the mirrored network, leading to unauthorized changes in configuration and runtime behavior. Without proper safeguards, your otherwise secure environment could turn into a playground for malicious activities — and that’s absolutely devastating!

Put simply

Think of it like a glass wall in a restaurant where patrons can see into the kitchen, but instead of just watching, someone could actually influence the chefs' actions! The vulnerability in RUGGEDCOM devices arises from insufficient blocking of data forwarded over the mirror port, allowing attackers to inject malicious packets into the mirrored network.

What to do

This vulnerability could allow an attacker to manipulate systems in the mirrored network, leading to unauthorized changes in configuration and runtime behavior. Without proper safeguards, your otherwise secure environment could turn into a playground for malicious activities — and that’s absolutely devastating! To mitigate this risk, immediately update your RUGGEDCOM devices to the latest firmware version available. Additionally, review your network architecture to ensure strict access controls and monitoring are in place for the mirrored network. Don't wait on this one! You've got this! With prompt action, you can secure your network and keep it safe! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00692 · 52.3th percentile
Weakness
CWE-684 · Incorrect Provision of Specified Functionality
Published
2023-08-08T09:20Z
EPSS history
Timeline
  • 08 AUG 09:20Z
    A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803…
    cvelistv5