RISK EVALUATION. Successful exploitation of this vulnerability could allow an attacker to send specially crafted packets to change credentials without any prior authentication.
A vulnerability of authentication bypass has been found in Zebra Technologies ZTC Industrial ZT410 and ZTC Desktop GK420d.
For this vulnerability to be exploitable, the printer's protected mode must be disabled.
CVE-2023-4957 has been assigned to this vulnerability.
A CVSS v3 base score of 5.4 has been calculated; the CVSS vector string is.
MITIGATIONS. Zebra printers running Link-OS v6.0 and later have a protected mode that protects the printer from this vulnerability.
Activating this mode disables unauthorized changes and locks the current configuration until an administrator authorizes updates.
By default, the secure mode is disabled as it is necessary to generate a password first.
The service and support discontinuation dates are in September and December, 2025, depending on region.
The service and support discontinuation date is April 30, 2025.
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.
Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.
Gov/ics in the technical information paper, ICS-TIP-12-146-01B-Targeted Cyber Intrusion Detection and Mitigation Strategies.
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.
This Cyber News was published on www.cisa.gov. Publication date: Tue, 05 Dec 2023 16:10:28 +0000