GOK is offering a security patch/update for the already built-in network-compatible devices, the SmartBox 4 LAN and SmartBox 4 LAN PRO with software version < V6.3. Devices delivered after 01.06.2019 do not have the problem. Devices, with which device queries have to be done through the PC applications PC set LAN, PC set LAN PRO or www.smart-inspector.com, are also not affected by this problem.
Relevance:
This patch is only relevant if you have actually set up a port forwarding for external access on your router, meaning that the device can be accessed from the internet.
Unauthorised persons can access the device through the detected security hole, but they cannot reach the local network. As an emergency measure, we recommend that you first deactivate this port forwarding. The port forwarding can then be set up again after the security hole has been closed.
Advisory / Advisory instructions:
see PDF (p1 Engl., p2 German) or use the following link to access the Advisory, which was developed in cooperation with CERT@VDE: https://cert.vde.com/de-de/advisories/vde-2019-012.
Patch/Fix:
- Download the following ZIP archive (Link) ZIP-Archiv.
- Unzip the file and start ‘setup.exe’.
- This set-up loads an updater program onto your computer.
- Start this updater and follow the instructions.
The updater updates the firmware of the level display systems affected, closing the aforementioned security hole. With devices delivered after 2015, it is an update to version V6.32.
If you have any questions, please contact us at info@gok.de.