T:LAN OS Advisory – November 2017

REFERENCE:

Optima Document Number: 4000-T200050A

DATE:

November 10, 2017

DESCRIPTION:

Under rare circumstances, Supervisor/Manager level users cannot properly manage locally stored user records or create new user records.

SEVERITY:

Moderate.

OCCURENCE:

Rare.

SYMPTOMS:

USER AND SYSTEM ACCESS SETTINGS Menu

(1) [A]dd does not work. Instead of creating a new user, the currently shown user record #1 is replaced/updated.

(2) When attempting to [A]dd a new user, the access level query may be skipped. This causes the port masking option to be displayed instead.

(3) The [D]elete command does not erase the entry. User record #1 still visible after invoking the command for entry #1).

(4) Using the [E]dit command does not show the login string of the selected entry.

(5) Attempting to [E]dit the password string of the selected entry (also not shown on screen) may cause the T:LAN OS to re-boot.

AFFECTED T:LAN MODELS:

All T:LAN Models (NetPro, OCP).

STANDARD MODE T:LANs:

OS images up to and including BN7605 affected.

SECURE MODE T:LANs:

OS images up to and including BN7605 affected. SECURE MODE units may still exhibit the same symptoms even though this is more of a STANDARD MODE issue. T:LAN units operating in SECURE mode use centrally managed user records. These units do NOT rely on the locally stored user records for remote access. T:LANs in SECURE MODE will only be directly affected if a local CRAFT PORT session is in progress and a locally stored user record is in use.

ANALYSIS:

The issue is a direct result of certain data constellations stored in the T:LAN configuration profile. After examining customer provided T:LAN configuration files it was found that an empty user record existed in front of valid user record entries. Under normal conditions, erased or empty user records are always moved to the back of the locally stored user list. The empty record at the beginning of the examined user records list was found to be the root cause the noted symptoms.

FIX APPLIED IN OS BUILD NUMBER:

BN7606

RELEASE DATE:

November 10, 2017.

PROCEDURE:

Upgrade affected T:LAN unit to BN7606 (or newer), then access the USER AND SYSTEM ACCESS SETTINGS Menu.