Applied Systems Engineering ASE2000 V2 Communications Test Set
CISA warns ASE2000 V2 test sets allow arbitrary file read/write, outbound request abuse, and TLS peer impersonation; version 2.38 fixes both vulnerabilities.
CISA published ICS advisory ICSA-26-239-04 for Applied Systems Engineering (Kalkitech) ASE2000 V2 Communications Test Set versions 2.25 through 2.37. Exploitation could allow reading or writing arbitrary local files, forcing outbound network requests, or intercepting the TLS connection to impersonate the trusted peer and read or modify protected communications. Vendor ASE/Kalkitech provides upgraded version 2.38, which also updates the bundled log4net library, fixing both vulnerabilities; customers are advised to upgrade.
18