ICSA-18-263-02

icsaUScisa_csaf_ot

Rockwell Automation RSLinx Classic

view advisory published 2018-09-20

Successful exploitation of these vulnerabilities could crash the device being accessed or allow arbitrary code execution on the device.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2018-14829UScritical9.8—
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causin…
CVE-2018-14827UShigh7.5—
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, ca…
CVE-2018-14821UShigh7.5—
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to P…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan