Rockwell Automation Stratix 5950
Successful exploitation of this vulnerability could allow a remote attacker to cause an affected device to reload.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-0472US | high8.6 | — | ||
A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an unauthenticate… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-19-094-04 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationAllen-Bradley Stratix 5950
Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270.
- FixedAllen-Bradley Stratix 5950
IPsec is disabled by default in the Allen-Bradley Stratix 5950 devices.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan