Vulnerability · Published Nov 19, 2020 · Assigned by CERTVDE
CVE-2020-12496ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 2.x exposures sensitive information to an unauthorized actor
Medium 6.5
In plain English
A medium-severity information exposure in ORSG35 - Ecograph T Neutral/Private Label from Endress+Hauser. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Official description
Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to the server, which makes repeating requests and analysis complex enough. Nevertheless, it's possible and during the analysis it was discovered that it also has an issue with the access-control matrix on the server-side. It was found that a user with low rights can get information from endpoints that should not be available to this user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Endress+Hauser | RSG35 - Ecograph T | V2.0.0 – before * |
| Endress+Hauser | ORSG35 - Ecograph T Neutral/Private Label | V2.0.0 – before * |
| Endress+Hauser | RSG45 - Memograph M | V2.0.0 – before * |
| Endress+Hauser | ORSG45 - Memograph M Neutral/Private Label | V2.0.0 – before * |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
References
- https://cert.vde.com/en-us/advisories/vde-2020-022 x_refsource_CONFIRM