Novakon P Series Buffer Overflow Vulnerability Allowing Root Access

A buffer overflow vulnerability has been identified in the Novakon P Series HMI devices, specifically in version V2001.A.C518o2. This vulnerability allows unauthenticated attackers to gain root privileges remotely. The issue arises from the PSeriesbiosinterface, which is exposed over UDP on port 60681.

Impact

Exploitation of this vulnerability leads to unauthorized remote code execution with root privileges on the affected device.

Reproduction

The vulnerability can be reproduced by sending a crafted UDP packet to port 60681. The packet must be crafted to exploit the buffer overflow, overwriting the return address with a payload that, when executed, spawns a telnet server on the device.

Remediation

No official patch is available. It is recommended to restrict network access to the device and disable Ethernet configuration if serial ports are used for PLC communication.