Rockwell Automation RSLinx Classic
view advisory published 2019-03-05
Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the target device.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6553US | critical9.8 | — | ||
A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classic where the data in a Forward O… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationRSLinx Classic
For more information please see the Rockwell Automation security advisory
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1085038 - FixedRSLinx Classic
NOTE: In RSLinx Classic 4.10 or later, “Accept UDP Messages on Ethernet Port” checkbox is unchecked by default.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan