SB2024040303 - Multiple vulnerabilities in IOSIX IO-1020 Micro ELD

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024040303

SB2024040303 - Multiple vulnerabilities in IOSIX IO-1020 Micro ELD

Published: April 3, 2024

Security Bulletin ID SB2024040303
Severity
Medium
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Adjecent network
Highest impact Code execution

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Use of default credentials (CVE-ID: CVE-2024-30210)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to usage of default WIFI password. A remote attacker on the local network can connect to the device.


2) Use of default credentials (CVE-ID: CVE-2024-31069)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to the web server uses a default password for authentication. A remote attacker on the local network can gain access to sensitive information.


3) Download of code without integrity check (CVE-ID: CVE-2024-28878)

The vulnerability allows a remote attacker to compromise the affected system

The vulnerability exists due to software does not perform software integrity check when downloading updates. A remote attacker on the local network can gain full control over the affected device after a successful software update.


Remediation

Install update from vendor's website.

References