ICSA-18-107-03_Rockwell Automation Stratix Services Router
Rockwell Automation reported these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-0175US | high8.0OT critical | KEV | ||
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthentic… | ||||
| CVE-2018-0167US | high8.8OT critical | KEV | ||
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow a… | ||||
| CVE-2018-0158US | high8.6OT critical | KEV | ||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a mem… | ||||
| CVE-2018-0151US | critical9.8OT critical | KEV | ||
A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of servi… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationAllen-Bradley Stratix 5900 Services Router
CVE-2018-0151: Users who do not use the Adaptive QoS for DMVPN feature can deny all traffic destined to UDP port 18999 on an affected device by using a Control Plane Policing (CoPP) policy. If the Adaptive QoS for DMVPN feature is later configured, the device must be upgraded to an unaffected release of Cisco IOS Software or Cisco IOS XE Software and the CoPP policy must be removed.
- MitigationAllen-Bradley Stratix 5900 Services Router
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5900 Services Router
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5900 Services Router
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan