Pepperl+Fuchs Profinet Gateway LB8122A.1.EL SNMP Information Disclosure Vulnerability Triggering Device Reboot

A vulnerability exists in the Pepperl+Fuchs Profinet Gateway LB8122A.1.EL, allowing unauthenticated remote attackers to access information about running processes via the SNMP protocol. This information retrieval can be used to trigger a device reboot through the watchdog mechanism. The vulnerability is present in versions prior to 1.3.13.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure about running processes, with the potential to cause a device reboot.

Remediation

Users are advised to update to the firmware version 1.3.13. The web server is off by default and can only be activated via the gateway display for a duration of 5 minutes. Ensure that only authorized personnel have access to the gateway and use it in an isolated network environment.