ICSA-19-113-01

icsaUScisa_csaf_ot

Rockwell Automation MicroLogix 1400 and CompactLogix 5370 Controllers

view advisory published 2019-04-23

Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to input a malicious link redirecting users to a malicious website.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-10955USmedium6.1—
In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 contro…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationCompactLogix 5370 L1 controllers

    Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

  • MitigationCompactLogix 5370 L2 controllers

    Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

  • MitigationCompactLogix 5370 L3 controllers

    Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

  • MitigationMicroLogix 1100 Controllers

    Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

  • MitigationMicroLogix 1400 Controllers Series A

    Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

  • MitigationMicroLogix 1400 Controllers Series B

    Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan