[Control systems] Cradlepoint security advisory (AV22-647)

Number: AV22-647
Date: 17 November 2022

On 17 November 2022, ICS-CERT published an ICS Advisory to highlight a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following product:

• Cradlepoint IBR600 NetCloud OS (NCOS) – version 6.5.0.160bc2e and prior

Exploitation of this vulnerability could allow arbitrary code execution or execution of arbitrary commands.

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary update.

• ICS Advisory (ICSA-22-321-02)