Rockwell Automation Allen-Bradley Stratix 5950
Successful exploitation of these vulnerabilities could allow an attacker to bypass client certification to create connections to the affected device or cause the device to crash.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-0296US | high7.5OT critical | KEV | ||
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpected… | ||||
| CVE-2018-0240US | high8.6 | — | ||
Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… | ||||
| CVE-2018-0231US | high8.6 | — | ||
A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an u… | ||||
| CVE-2018-0228US | high8.6 | — | ||
A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the CPU to increase u… | ||||
| CVE-2018-0227US | high7.5 | — | ||
A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow an… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-18-184-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- MitigationAllen-Bradley Stratix 5950
CVE-2018-0227 — No workarounds available
- MitigationAllen-Bradley Stratix 5950
CVE-2018-0228 — The ASA and FTD configuration commands—set connection per-client-embryonic-max (TCP) and set connection per-client-max (TCP, UDP, and Stream Control Transmission Protocol [SCTP])—can be configured to limit the number of connection requests allowed. Using these configuration parameters can reduce the number of connections and greatly reduce the impact of the DoS attack.
- MitigationAllen-Bradley Stratix 5950
CVE-2018-0231 — No workarounds available
- MitigationAllen-Bradley Stratix 5950
CVE-2018-0240 — No workarounds available
- MitigationAllen-Bradley Stratix 5950
For additional information please see the Rockwell Automation security notification at (login required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073860
https://urldefense.proofpoint.com/v2/url?u=https-3A__rockwellautomation.custhelp.com_app_answers_detail_a-5Fid_1073860&d=DwMGaQ&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=zE5lG3CZZIbdBvT6slVAzQ&m=d7_uax5LG0vjWoCGwelqASZRyzRGG85aflD3xxdn7I4&s=QsGtt5inxh43clly39aymIsyKWnoKwawSFbQUhiVVhA&e=
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan