Argitalpen data: 2022/01/21
Garrantzia:Kritikoa
Kaltetutako baliabideak:
- DeviceCare = 1.07.03;
- DTM honako hauetarako:
- Cerabar / 5xB/7xB / HART = 1.67.0.805;
- CLD18 / CI / CDI = 1.2.0.0;
- CM14 / CC / CDI = 1.2.0.0;
- CM14 / CI / CDI = 1.2.0.0;
- CM14 / DO / CDI = 1.2.0.0;
- CM14 / pH / CDI = 1.2.0.0;
- Deltabar / 5xB/7xB / HART = 1.67.0.805;
- Display / RID1x / CDI = 1.1.1.400;
- Dosimag / 5BH / CDI = 1.4.0.64;
- Dosimag / 5BH / MR4 = 1.4.1.78;
- Dosimass / 8BE / CDI = 1.4.0.112;
- Dosimass / 8BE / MR4 = 1.4.1.121;
- Ecograph T / RSG35 / CDI = 2.4.0.0;
- EngyCal / RH33 / CDI = 1.7.0.5;
- EngyCal / RS33 / CDI = 1.1.6.3352;
- Fieldgate /SFG500 / Profibus = 1.10.00;
- FXA195 / HART = 1.0.57;
- Gammapilot 5x / FMG50 / HART = 1.43.0.1953;
- iTEMP / TMT142B / HART = 3.1.4.795;
- iTEMP / TMT162 / HART = 1.13.132.5451;
- iTEMP / TMT71 / CDI = 1.13.18.5253;
- iTEMP / TMT72 / HART = 1.13.258.2304;
- iTEMP / TMT82 / HART = 1.10.423.4213;
- iTEMP / TMT82 / HART = 1.11.480.5368;
- Levelflex / FMP5x / FF = 1.11.0.1471;
- Levelflex / FMP 5x / HART = 1.10.1.2369;
- Levelflex / FMP 5x / PA = 1.11.0.1017;
- Liquiline CA80xx / CDI = 1.0.22.0;
- Liquiline / CA80xx / DP = 1.11.0.0;
- Liquiline / CM442 / CDI = 1.0.22.0;
- Liquiline CM44x / CDI = 1.0.22.0;
- Liquiline / CM44x / DP = 1.11.0.0;
- Liquiline Compact / CM82 / HART = 1.2.0.796;
- Liquiline Cond / CM42 / FF = 2.4.0.22;
- Liquiline Cond / CM42 / HART = 2.4.0.22;
- Liquiline Cond / CM42 / PA = 2.4.0.22;
- Liquiline Oxygen / CM42 / FF = 2.4.0.22;
- Liquiline Oxygen / CM42 / HART = 2.4.0.22;
- Liquiline Oxygen / CM42 / PA = 2.4.0.22;
- Liquiline pHORP / CM42 / FF = 2.4.0.22;
- Liquiline pHORP / CM42 / HART = 2.4.0.22;
- Liquiline pHORP / CM42 / PA = 2.4.0.22;
- Liquistation / CSF22 / CDI = 1.0.22.0;
- Liquistation / CSF48 / CDI = 1.0.22.0;
- Liquistation CSFxx / CDI = 1.0.22.0;
- Liquistation / CSFxx / DP = 1.11.0.0;
- Memograph M / RSG45 / CDI = 2.4.0.0;
- Micropilot / FMR20 / HART = 1.9.0.358;
- Micropilot / FMR5x / FF = 1.11.0.745;
- Micropilot / FMR5x / HART = 1.10.0.913;
- Micropilot / FMR5x / PA = 1.11.0.375;
- Micropilot / FMR6x / HART = 1.10.0.807;
- Promag 100 / 5x1B / DP = 1.7.0.86;
- Promag 100 / 5x1B / EIP = 1.6.0.175;
- Promag 100 / 5x1B / EIP-CDIE = 1.5.0.174;
- Promag 100 / 5x1B / HART = 1.3.0.201;
- Promag 100 / 5x1B / MR4 = 1.4.1.354;
- Promag 100 / 5x1B / MR4-CDIS = 1.4.1.354;
- Promag 100 / 5x1B / PNIO-CDIE = 1.6.0.37;
- Promag 10 / 5xBB / HART = 1.76.0.184;
- Promag 10 / 5xBB / HART-CDIS = 1.76.0.184;
- Promag 10 / 5xBB / MR4 = 1.76.0.159;
- Promag 10 / 5xBB / MR4-CDIS = 1.76.0.159;
- Promag 200 / 5x2B / FF = 1.6.0.73;
- Promag 200 / 5x2B / HART = 1.5.0.219;
- Promag 200 / 5x2B / PA = 1.7.0.57;
- Promag 300 500 / 5x3x 5x5x / DP = 1.11.0.65;
- Promag 300 500 / 5x3x 5x5x / EIP = 1.10.0.59;
- Promag 300 500 / 5x3x 5x5x / EIP-CDIE = 1.10.0.59;
- Promag 300 500 / 5x3x 5x5x / FF = 1.9.0.122;
- Promag 300 500 / 5x3x 5x5x / HART = 1.39.0.285;
- Promag 300 500 / 5x3x 5x5x / MR4 = 1.39.0.230;
- Promag 300 500 / 5x3x 5x5x / MR4-CDIE = 1.39.0.230;
- Promag 300 500 / 5x3x 5x5x / PA = 1.11.0.104;
- Promag 300 500 / 5x3x 5x5x / PA = 1.12.0.161;
- Promag 300 500 / 5x3x 5x5x / PN-CDIE = 1.39.0.136;
- Promag 400 / 5x4Bxx / HART = 1.0.0.349;
- Promag 400 / 5x4C / DP = 1.8.0.58;
- Promag 400 / 5x4C / EIP = 1.3.0.84;
- Promag 400 / 5x4C / EIP = 1.8.0.101;
- Promag 400 / 5x4C / HART = 1.39.0.276;
- Promag 400 / 5x4C / HART = 1.3.0.132;
- Promag 400 / 5x4C / MR4 = 1.39.0.191;
- Promag 400 / 5x4C / MR4-CDIE = 1.5.0.59;
- Promag 400 / 5x4C / MR4-CDIE = 1.10.0.148;
- Promag 400 / 5x4Cxx / HART = 1.0.0.32;
- Promass 100 / 8x1B / DP = 1.7.0.141;
- Promass 100 / 8x1B / EIP = 1.6.0.463;
- Promass 100 / 8x1B / EIP-CDIE = 1.5.0.463;
- Promass 100 / 8x1B / HART = 1.4.0.282;
- Promass 100 / 8x1B / MB = 1.4.1.519;
- Promass 100 / 8x1B / PNIO-CDIE = 1.6.0.70;
- Promass 100 / 8x1Bxx / MB = 1.4.0.513;
- Promass 100 / 8x1Bxx / MB = 1.0.0.0;
- Promass 100 / 8x1Bxx / MR4 = 1.2.0.476;
- Promass 10 / 8xBB / HART = 1.76.0.271;
- Promass 10 / 8xBB / HART-CDIS = 1.76.0.271;
- Promass 10 / 8xBB / MR4 = 1.76.0.158;
- Promass 10 / 8xBB / MR4-CDIS = 1.76.0.158;
- Promass 200 / 8x2B / FF = 1.3.0.150;
- Promass 200 / 8x2B / HART = 1.5.0.1133;
- Promass 200 / 8x2B / PA = 1.7.0.236;
- Promass 300 500 / 8x3x 8x5x / DP = 1.11.0.93;
- Promass 300 500 / 8x3x 8x5x / EIP = 1.10.0.94;
- Promass 300 500 / 8x3x 8x5x / EIP-CDIE = 1.10.0.94;
- Promass 300 500 / 8x3x 8x5x / FF = 1.9.0.197;
- Promass 300 500 / 8x3x 8x5x / HART = 1.39.0.646;
- Promass 300 500 / 8x3x 8x5x / MR4 = 1.39.0.289;
- Promass 300 500 / 8x3x 8x5x / MR4-CDIE = 1.39.0.289;
- Promass 300 500 / 8x3x 8x5x / PA = 1.12.0.193;
- Promass 300 500 / 8x3x 8x5x / PN-CDIE = 1.39.0.222;
- Proservo / NMS8x / HART = 1.9.2.887;
- Prosonic Flow 100 / 9E1B / CDI = 1.10.0.172;
- Prosonic Flow 100 / 9E1B / HART = 1.10.0.151;
- Prosonic Flow 300 500 / 9x3x 9x5x / HART = 1.45.0.327;
- Prosonic Flow 300 500 / 9x3x 9x5x / MR4 = 1.45.0.128;
- Prosonic Flow 300 500 / 9x3x 9x5x / MR4-CDIE = 1.45.0.128;
- Prosonic Flow 300 500 / 9x3x 9x5x / MR4-CDIE = 1.38.0.88;
- Prosonic Flow B 200 / 9B2B / HART = 1.6.0.800;
- Prothermo / NMT8x / HART = 1.73.0.317;
- Prowirl 200 / 7x2B / FF = 1.11.0.174;
- Prowirl 200 / 7x2B / HART = 1.12.0.537;
- Prowirl 200 / 7x2Bxx / PA = 1.11.0.135;
- RA33 / CDI = 1.1.6.3352;
- Tank Gauging Radar / NMR8x / HART = 1.9.2.799;
- Tank Side Monitor / NRF8x / HART = 1.9.2.669;
- t-mass 150 / 6xABxx / HART = 1.0.0.162;
- t-mass 150 L T 150 / 6xAB / HART = 1.2.0.42;
- t-mass 300 500 / 6x3B 6x5B / HART = 1.45.0.280;
- t-mass 300 500 / 6x3B 6x5B / MR4 = 1.45.0.127;
- t-mass 300 500 / 6x3B 6x5B / MR4-CDIE = 1.45.0.127;
- TrustSens / TM371-TM372 / HART = 1.11.301.4871.
- DTM library honako hauetarako:
- SWA50 = 1.0.2.4;
- SWA70 = 1.0.2.4;
- SWG70 / WirelessHART = 1.0.2.4.
- FieldCare = 2.15.01;
- Field Xpert = 1.05.03;
- HoP DTM = 1.0.2;
- iDTM FF = 2.00.289;
- iDTM HART = 2.00.289;
- IO-Link IODD Interpreter DTM = 3.12.0;
- OPC Server para SWG70 = 1.00.01;
- OPC UA Connectivity Server = 1.3.7817.
Azalpena:
CodeWrights GmbH-k, CERT@VDErekin koordinazioan, ahultasun honen berri eman zion ENDRESS HAUSER-i. Hori baliatuz, baimenak dituen erabiltzaile baten edo administratzaile baten sarbide eskubideak dituen erasotzaile batek zerbitzuaren ukapena eragin lezake, kredentzialen galera eragin edo kodea exekutatu.
Konponbidea:
Honako hauetara eguneratzea:
- FieldCare 2.16 bertsioa;
- DeviceCare 1.07.05 bertsioa;
- Field Xpert 1.05.05 bertsioa;
- OPC UA Konektibitate Zerbitzaria 1.3.7818 bertsioa.
Xehetasuna:
2.0.10 baino lehenagoko Apache log4net-en bertsioek ez dituzte desgaitzen XML kanpo entitateak log4net-en konfigurazio fitxategiak analizatzean. Horrek ahalbidetzen du XXE-n oinarritutako erasoak egitea erasotzaileek kontrolatutako log4net-en konfigurazio fitxategiak onartzen dituzten aplikazioetan.
Etiketak:Eguneraketa, Azpiegitura kritikoak, Ahultasuna