iniNet Solutions GmbH SCADA Webserver

Risk Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

CVEs (1)

Remediations

• IniNet Solutions GmbH has released a new version of the SCADA Webserver, V2.02.0100, which allows users to implement basic authentication. It can be found at the following location (login required):
• Instructions for implementing basic authentication can be found in the user manual for V2.02.0100.
• IniNet Solutions GmbH reminds users that the webserver is designed to be used in a protected environment.
• As a third-party software, the iniNet Webserver is used in many different vendors' products. Asset owners should determine if they are using a vulnerable version of the iniNet Webserver and follow the recommended practices below.
• IniNet Solutions GmbH recommends that users never connect PLCs to the Internet. If a user must connect to the Internet, IniNet Solutions GmbH recommends using a managed infrastructure to do so.

Affected Vendors

Affected Products (1)