Rewterz

Rewterz Threat Advisory – ICS: Siemens SINEMA Remote Connect Server Multiple Vulnerabilities

September 18, 2019
Rewterz

Rewterz Threat Alert – Spam Campaign Utilizing LokiBot For their Gain

September 18, 2019

Rewterz Threat Advisory – CVE-2019-13523 – ICS: Honeywell Performance IP Cameras and Performance NVRs Information Disclosure Vulnerability

Severity

Medium

Analysis Summary

The integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network.

Impact

Exposure of sensitive information

Affected Vendors

Honeywell

Affected Products

Performance IP Cameras and Performance NVRs

Remediation

Honeywell has released firmware update packages for all affected products.

https://mywebtech.honeywell.com/Home

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.