Description (CNA)
An unused function in MicroServer can start a reverse SSH connection to a vendor registered domain, without mutual authentication. An attacker on the local network with admin access to the web server, and the ability to manipulate DNS responses, can redirect the SSH connection to an attacker controlled device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Columbia Weather Systems / MicroServer | affected 0 before MS_4.1_14142 |
CWE
CWE-923
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-006-01
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-006-01.json
ADP enrichment
No English description supplied.
No references supplied.