CyberData 011209 SIP Emergency Intercom Authentication Bypass Vulnerability Leading to Denial-of-Service

A vulnerability in the CyberData 011209 SIP Emergency Intercom, affecting versions prior to 22.0.1, allows an unauthenticated user to access the web interface through an alternate path, bypassing authentication. This vulnerability could lead to a denial-of-service condition or disrupt system operations.

Impact

Exploitation of this vulnerability could cause a denial-of-service condition or disrupt system operations.

Remediation

Users are advised to update the intercom to version 22.0.1. CISA recommends minimizing network exposure for control system devices, locating them behind firewalls, and using secure remote access methods such as VPNs. Organizations should also follow CISA's recommended practices for ICS cybersecurity.