ICSA-19-094-03

icsaUScisa_csaf_ot

Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700

view advisory published 2019-04-04

Successful exploitation of these vulnerabilities could result in a denial-of-service condition or time synchronization issues across the network via reloading the device, a buffer overflow, or memory exhaustion.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2018-15373UShigh7.4—
A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to…
CVE-2018-0473UShigh8.6—
A vulnerability in the Precision Time Protocol (PTP) subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of…
CVE-2018-0470UShigh8.6—
A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting…
CVE-2018-0467UShigh8.6—
A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due…
CVE-2018-0466USmedium6.5—
A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an aff…
02

references

External citations — patches, advisories, analysis.

03

remediations (60)

  • MitigationAllen-Bradley ArmorStratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley ArmorStratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley ArmorStratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley ArmorStratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley ArmorStratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5400

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5400

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5400

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5400

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5400

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5410

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5410

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5410

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5410

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5410

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 5700

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8000

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8000

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8000

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8000

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8000

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8300

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8300

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8300

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8300

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • MitigationAllen-Bradley Stratix 8300

    Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).

  • FixedAllen-Bradley ArmorStratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley ArmorStratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley ArmorStratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley ArmorStratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley ArmorStratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5400

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5400

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5400

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5400

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5400

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5410

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5410

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5410

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5410

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5410

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 5700

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8000

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8000

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8000

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8000

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8000

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8300

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8300

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8300

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8300

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

  • FixedAllen-Bradley Stratix 8300

    FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan