Date: Friday 6th January 2023 - Updated Wednesday 18th January 2023
Severity: High (Infrastructure-dependant)
Vendor: DALIM SOFTWARE GmbH
Product Deployments Affected: DALIM ES, DALIM TWIST, DIALOGUE Engine SDK
Exceptions: Users of a DALIM SOFTWARE deployment managed & hosted within the DALIM SOFTWARE Cloud can be reassured that the advisory does not apply to them.
Description:
A 3rd party has posted on an exploit website the fact that DALIM SOFTWARE products include a "pre-defined SSH private key for a Linux account". Depending on how you have deployed your system, this is a potential security issue if the system hosting the DALIM SOFTWARE product is directly connected to the Internet and that host system has an unrestricted SSH port.
Solution:
It is recommended that you follow the steps below, working with your network and system administrator, to reduce the possibility of having your system exploited. If you need further assistance with any of these steps please contact your Authorized DALIM SOFTWARE Reseller (ADR) or the DALIM SOFTWARE Helpdesk.
1. Limit SSH access via IP filtering and to required Users only
https://docs.rackspace.com/support/how-to/restrict-ssh-login-to-a-specific-ip-or-host/
In addition, we recommend the best practice of isolating the DALIM SOFTWARE system and always using a Bastion host if you need an SSH connection exposed to the internet.
2. Install the latest software updates (Build 9946):
TWIST-9/LITHO-9/ES-6:
ftp://ftp.dalim.com/public/upgrades/linux/ES-6_LITHO-TWIST-9/e60t90_L64_9532.22_to_9946.4.iso.gz
TWIST-8.5/LITHO-8.5/ES-5.5/DIALOGUE ENGINE SDK-5.5:
ftp://ftp.dalim.com/public/upgrades/linux/ES-5.5_LITHO-TWIST-8.5_DIALOGUE_Engine_SDK-5.5/e55t85_L64_7317.3_to_9946.3.iso.gz
For instructions on how to run the supportRenewSSH script, please refer to the following documentation:
If you need assistance updating the software, please get in touch with us at helpdesk@dalim.com.
Regards,
DALIM SOFTWARE Product Management