On 4 November 2021 ICS-CERT published an ICS Advisory to highlight vulnerabilities in the following product:
- VBASE Pro-RT/Server-RT (Web Remote) – version 11.6.0.6
Exploitation of these vulnerabilities could result in malicious input, disclosure of local files, access to NTLM hashes, or access to sensitive files.
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.
ICS Advisory (ICSA-21-308-01)
https://us-cert.cisa.gov/ics/advisories/icsa-21-308-01