Headline
CVE-2022-34821
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 (All versions), SIMATIC CP 1243-7 LTE EU (All versions), SIMATIC CP 1243-7 LTE US (All versions), SIMATIC CP 1243-8 IRC (All versions), SIMATIC CP 1542SP-1 IRC (All versions >= V2.0), SIMATIC CP 1543-1 (All versions < V3.0.22), SIMATIC CP 1543SP-1 (All versions >= V2.0), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions >= V2.0), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions >= V2.0), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions >= V2.0), SIPLUS NET CP 1242-7 V2 (All versions), SIPLUS NET CP 1543-1 (All versions < V3.0.22), SIPLUS S7-1200 CP 1243-1 (All versions), SIPLUS S7-1200 CP 1243-1 RAIL (All versions). By injecting code to specific configuration options for OpenVPN, an attacker could execute arbitrary code with elevated privileges.
%PDF-1.5 %���� 76 0 obj << /Length 2677 /Filter /FlateDecode >> stream x��[�R�H}�+�(G���_:v7��� f��bC�F�<�m�16c�����YU2�-�=2�>�䒔�y*O^J6M���z�K��#Ns���C��:1��L�%_�^��f�y�ˍM{�p1�t�J��g:���) �ơ��<�=~6������w�;�;8��u�@!��G1�%�ۃ��d�~K(�&���D*A�p>Nz�9�Ѩ�X���� �|�L+�3r)��X�qҘ*@��m�w���1o� bJƷ��1�*�TDhÊmd&l�L�.�|X���n���ϙ%��s�]���+��V�o�&�Q�⦮�eG�t1�d���|�y6_7D0G��Z"�&�n%�qb��d �R� �’ zG(�m���X��Έ�l���(Y�i��fD+� 2|+ �oR��x���������o�9������:�栏ڨ: 7Xq��� �KC�Q�4W�(��� b����(�r^��]6(��Q��[8���]�z�� n*<��2��2��Mpi���&�H�?����~8�8ȕ�� ����n��%�i�����f��Vm4�Y�U����/u�!�Y��ފ�6� ~J͊�o��9��0���c�t�ZA8cIR�2�8[�Rh�E>��"�����@�d%O9�KM�q��v���R����y������a왧��Y6�^v,M��f��%�,�d�6>w�녇g��Y���*`�J ��%D�,`��V��2�U��!�Q]R��Ç���q���(�5Q�5�@N���t��b���x�+��eWX�f�0�[F���7 ��b�O����z#TL~��W8�X��犛AnN�Q�@��’�q7��E9��M’)nJ�O?�@��y�N�����-<�n�<%�N���I6,���.��p��9~��b��##�R�I$Di?���q1�F|К�ƛ’�8�`X�~ꁷ���G�����~�^ � }���v����࣏�������x��xe0��E1�"v���h1 G/�7n�(����{^����,’e᱇���ƏZE�a�.vO��8�F7���d�I�ĥ��<u�У��0� ��b0AO��č����3)�c��L�7�x2����� G>��s�N������>3����TtY�^�O�c�띞����0����O�K�ɨ�i8�]G� �.�V����w��=��Ǜ80�K!���c08zkݪ�ǻYv��\��+l��"�;#a�y _�q�p�I���-� ��W�H�mZti "Xwz�a b�b��(`�8 4�G8+g1��’:?�CX�|<i+[�Tc����3�����^1I8�G>��{wr�?y�T�@am��z�JGP-x8al+�5ܡ�&�Qİ��g�ާ�����9A�mg��Pb�mDpЋ��&�0m��|l��sJX+�9^�m�F�&�Q�T��x�����駆��`6�tВ���%�hug�֠��d(a�o�6���-�������L2�NVF�k{^ؽ��48��’��R�,K�*;g%ƕ�@�5���͊�WW�����7���}P��d2*�O��F�� �2���}q<����"�EeL���+��_oj�K Tػ��vF�l;�m)]�N(%6Z K2U%�j���좏A��j6(���2�k�xʸ�]�.y8b�����K��[ϡqPI9&�_N(�aÖ4�����Gp�����z�t4�V鱄����n��>X"V���?��ߠ’�N���<�RU-�>]��_�2,)�i������lz��J.q�?A8��M"�����̠*�k˶TAbhl░�4Y�q�’Q_rog��y"�����RpOX `