Davy Douhine
0day
Abstract
Last summer during a pentest for a client we came across industrial switches made by Hirschmann: a Belden Brand,
(which) provides the industry with leading Ethernet networking technology and sets the industrial networking standards
for quality, reliability and service. (Source: http://www.belden.com/aboutbelden/brands/Hirschmann.cfm ) and found a few unknown vulnerabilities (0day) affecting version 2.0.00 and prior versions.
We’ve choose to “responsible disclose” them, directly to Hirschmann and the ICS-CERT (Industrial Control Systems Cyber Emergency Response Team). Since then a new firmware has been released (2.0.01) to patch one of them (the most critical). ICS-CERT has released an advisory and a CVE (CVE-2017-5163) has been assigned.
