Televic has announced a fix for PHP vulernabilities on its Lingua IR charger and transmitter management webpages as well as its Plixus CoCon v6 management webpages.
The critical vulnerabilities allow unauthenticated remote code execution on
systems running affected PHP versions and related SAPIs.
The fix for
Lingua T 2.3.0 and Lingua CHC 2.2.3 is expected to
release in December. As the system does not require an active
LAN network for functioning, Televic recommends disconnecting the LAN interface
until the fix has been released.
All other actively maintained Televic
Conference products remain unaffected.
Televic recommends updating systems with the
applicable hotfix release and advises all customers operating the affected products
to run these systems on an isolated, secured network until updated.