ICS Advisories

Risk evaluation

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote attacker with high privileges to inject commands or trigger a buffer overflow. Successful exploitation may result in command execution with root privileges or a denial of service.

Mitigatiesamenvatting

Do not expose the management interface to the internet or other untrusted networks. Restrict management access to trusted administrator workstations using network segmentation and firewall rules.