ST Engineering iDirect iQ-Series Terminals

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to device information or cause a denial-of-service condition.

CVEs (2)

Remediations

• ST Engineering iDirect has fixed the vulnerabilities and recommend users update the software to version 4.5.2.2 or newer.
• Registered users are able to download patches from the iDirect Support Portal https://support.idirect.net/s/login.
• Restrict management interfaces to trusted networks (e.g., VPN, ACLs).
• Avoid exposing administrative APIs to the public internet.
• Enforce strong authentication practices.
• Monitor for anomalous API activity and unexpected device reboots.

Affected Vendors

Affected Products (3)

Affected Sectors

Communications, Defense Industrial Base, Energy, Government Services and Facilities, Transportation Systems