Lenze cabinet — Schwachstelle CVE-2022-2302

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

As part of a security strategy, Lenze SE recommends the following general defense measures to reduce the risk of exploits: • Only use the products in a protected and controlled environment to minimize network impact and to ensure that they are inaccessible from outside. • Use external firewalls to protect the automation system network and to separate it from other networks. Remark: One Measure should be to block port 4840 via the external firewall and open this port for authenticated access only. • Use Virtual Private Networks (VPN) tunnels when remote access is required. • Use IDS (Intrusion Detection Systems) where possible to detect anomalies in the network. • Activate and use user administration and password functions. • Use encrypted communication links. • Restrict access to both the development tools and their projects and the products of the automation system by physical means, operating system functions, etc. • Protect the development tool by using the latest virus detection solutions. • Use of certificate-based communication via the message security modes Sign or Sign&Encrypt and trust of the corresponding client certificates on the machine controller by the OPC-UA server. This can reduce the risk of exploiting this vulnerability.