cyber.hendryadrian.com
Vulnerability & Exploit · securityweek.com

BRIDGE:BREAK Flaws in Serial-to-IP Converters Could Enable Remote Attacks

· Original article ↗

Summary

Forescout identified 20 BRIDGE:BREAK vulnerabilities in Lantronix and Silex serial-to-IP converters, including flaws that could enable remote code execution, firmware tampering, denial of service, or device takeover. Both vendors released patches.

Key points

  • Forescout reported 20 vulnerabilities across Lantronix and Silex serial-to-IP converter products; some can reportedly be exploited without authentication.
  • The flaws could enable OS command injection, remote code execution, firmware tampering, denial-of-service attacks, and device takeovers.
  • Researchers demonstrated potential effects including manipulated industrial or healthcare sensor readings and disruption of healthcare devices and workflows.
  • The article says nearly 20,000 such systems are internet-exposed, based on a Shodan search.
  • Lantronix and Silex released patches; CISA published an advisory covering Lantronix vulnerabilities, and Silex published its own advisory.

Article Details

Vulnerability Types
  • OS command injection
  • Remote code execution
  • Firmware tampering
  • Denial of service
  • Device takeover
  • Arbitrary file upload
  • Authentication bypass
  • Information disclosure
Severity
Potentially serious
Exploitation Status
unknown
Exploit Availability
unknown
Patch Status
available

Vendors

LantronixThe devices are made by several major companies, including Moxa, Digi, Advantech, Perle, Lantronix, and Silex.SilexThe devices are made by several major companies, including Moxa, Digi, Advantech, Perle, Lantronix, and Silex.

Countries

PolandThey were targeted by Russian hackers in the 2015 Ukraine energy attack and, more recently, in attacks targeting energy facilities in Poland.UkraineThey were targeted by Russian hackers in the 2015 Ukraine energy attack and, more recently, in attacks targeting energy facilities in Poland.

Industries

energy and utilitiesSerial-to-IP converters are used in sectors such as industrial, telecoms, retail, healthcare, energy and utilities, and transportation.HealthcareSerial-to-IP converters are affected by potentially serious vulnerabilities that can expose operational technology (OT), healthcare, and other types of systems to remote attacks.Industrialare hardware devices that bridge legacy serial equipment to modern Ethernet/IP networks, allowing old industrial control systems (ICS) and other OT devices to communicate remotely.RetailSerial-to-IP converters are used in sectors such as industrial, telecoms, retail, healthcare, energy and utilities, and transportation.TelecomsSerial-to-IP converters are used in sectors such as industrial, telecoms, retail, healthcare, energy and utilities, and transportation.TransportationSerial-to-IP converters are used in sectors such as industrial, telecoms, retail, healthcare, energy and utilities, and transportation.

Related Articles