Pepperl+Fuchs: Vulnerability in multiple VisuNet devices

Critical vulnerabilities have been discovered in the utilized component Remote Desktop Client by Microsoft.For more information see: msrc.microsoft.com/update-guide/vulne... 2022-21990

Pepperl+Fuchs analyzed and identified affected devices.
In the case of a Remote Desktop connection, an attacker with control of a Remote Desktop Server could trigger a remote code execution (RCE) on the RDP client machine when a victim connects to the attacking server with the vulnerable Remote Desktop Client.The impact of the vulnerabilities on the affected device may result in

code execution

With the products mentioned above, the connection can only be established to RDP servers that have already been preconfigured by the role administrator or engineer. The role operator can therefore not connect to a random RDP server.

The following external protective measured are required:

• Connect only to trusted RDP servers.
• Protect your RDP servers with anti-virus software and Intrusion Detection System (=IDS)
• Access control to RDP servers and the role administrator and engineer on the
  affected device.

Install the following firmware with security patches to fix this vulnerability.
For products with Windows 10 LTSB 2016:
RM Image 5 Windows Cumulative Security Patch 03/2022 (KB5011495)

• incl. 2021-09 Servicing Stack Update (KB5005698)
• incl. Microsoft .NET Framework 4.7.2 for x64 (KB4054590)

Link: www.pepperl-fuchs.com/cgi-bin/db/doci...

For products with Windows 10 LTSC 2019:
RM Image 5.5 Windows Cumulative Security Patch for LTSC 03/2022 (KB5011503)

• incl. 08/2021 Servicing Stack Update (KB5005112)

Link: www.pepperl-fuchs.com/cgi-bin/db/doci...

Please note that the links provided are managed and point to the latest firmware available
for VisuNet devices.