ICSA-20-084-01
·
Published 2021-11-18
·
View on CISA ICS-CERT ↗
VISAM Automation Base (VBASE) (Update B)
CVSS 9.0
CRITICAL
Risk Summary
Successful exploitation of these vulnerabilities could allow an attacker to read the contents of unexpected files, escalate privileges to system level, execute arbitrary code on the targeted system, bypass security mechanisms, and discover the cryptographic key for the web login.
Remediations
- VISAM recommends users update to VBASE v11.7.0.2 or later. A download link will be provided by submitting a request form.
- For more information, please contact VISAM using the information provided on their contact page.
- For more information about these vulnerabilities and how VISAM plans to address them, please contact VISAM using the information provided on their contact page (German language).
Affected Vendors
VISAM
Affected Products (1)
VISAM
·
VBASE Editor
11.5.0.2
Affected Sectors
Multiple
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more