ICS Advisory: SEW-EURODRIVE MOVITOOLS MotionStudio

Summary:

The document provides information on a vulnerability in SEW-EURODRIVE's MOVITOOLS MotionStudio software, specifically version 6.5.0.2. The vulnerability, CVE-2023-6926, is rated CVSS v3.1 with a score of 5.5 and allows for open access to file information when processing XML information. The vulnerability is not exploitable remotely and no public exploitation has been reported. The affected product can be located globally and is used in various critical infrastructure sectors. The Cybersecurity and Infrastructure Security Agency (CISA) recommends users minimize network exposure, locate control systems behind firewalls, and use secure methods for remote access. Additionally, CISA provides resources for control systems security recommended practices and mitigation strategies.