Rockwell Automation Stratix and ArmorStratix Switches
Successful exploitation of these vulnerabilities could result in loss of availability, confidentiality, and/or integrity caused by memory exhaustion, module restart, information corruption, and/or information exposure.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-0175US | high8.0OT critical | KEV | ||
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthentic… | ||||
| CVE-2018-0174US | high8.6OT critical | KEV | ||
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affect… | ||||
| CVE-2018-0173US | high8.6OT critical | KEV | ||
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unau… | ||||
| CVE-2018-0172US | high8.6OT critical | KEV | ||
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affect… | ||||
| CVE-2018-0171US | critical9.8OT critical | KEV | ||
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected devi… | ||||
| CVE-2018-0167US | high8.8OT critical | KEV | ||
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow a… | ||||
| CVE-2018-0158US | high8.6OT critical | KEV | ||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a mem… | ||||
| CVE-2018-0156US | high7.5OT critical | KEV | ||
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected devi… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-18-107-04 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (40)
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan