EXECUTIVE SUMMARY:
A session management vulnerability has been CVE-2024-13967 identified in EIBPORT products used in building automation systems, which could allow unauthorized access to sensitive configuration pages through a session fixation attack. This flaw affects firmware versions up to on both LAN and GSM-enabled models, stemming from improper handling of web session identifiers that fail to maintain secure session management. Although not remotely exploitable under standard configurations, exposure of the device’s IP address to the Internet can enable attackers to bypass authentication, gain control over system settings, and alter device behavior. It requires immediate firmware upgrade to version which improves login credential verification, session token handling, and overall product hardening. It is urged to apply the update and follow recommended security practices to mitigate potential risks. The vulnerability has a CVSS score of 8.8.[/subscribe_to_unlock_form]
EXECUTIVE SUMMARY:
A session management vulnerability has been CVE-2024-13967 identified in EIBPORT products used in building automation systems, which could allow unauthorized access to sensitive configuration pages through a session fixation attack. This flaw affects firmware versions up to on both LAN and GSM-enabled models, stemming from improper handling of web session identifiers that fail to maintain secure session management. Although not remotely exploitable under standard configurations, exposure of the device’s IP address to the Internet can enable attackers to bypass authentication, gain control over system settings, and alter device behavior. It requires immediate firmware upgrade to version which improves login credential verification, session token handling, and overall product hardening. It is urged to apply the update and follow recommended security practices to mitigate potential risks. The vulnerability has a CVSS score of 8.8.[emaillocker id="1283"]
RECOMMENDATION:
REFERENCES:
The following reports contain further technical details:
[/emaillocker]