Kieback&Peter DDC4000 Series

Risk Summary

Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to gain full administrator rights on the system.

CVEs (3)

Remediations

• Kieback&Peter DDC4002, DDC4100, DDC4200, DDC4200-L and DDC4400 controllers are considered End-of-Life (EOL) and are no longer supported. Users operating these controllers should ensure they are operated in a strictly separate OT environment and consider updating to a supported controller.
• Kieback&Peter recommends users update to DDC4002e, DDC4200e, DDC4400e, DDC4020e and DDC4040e controllers.
• Kieback&Peter recommends all affected customers to contact their local Kieback&Peter office to update the firmware of the supported DDC systems to v1.21.0 or later.

Affected Vendors

Affected Products (10)

Affected Sectors

Critical Infrastructure Sectors, Commercial Facilities Sector, Communications Sector, Financial Services Sector, Food and Agriculture Sector, Government Services and Facilities Sector, Healthcare and Public Health Sector, Information Technology Sector