ICSA-20-294-01

icsaUScisa_csaf_ot

Rockwell Automation 1794-AENT Flex I/O Series B

view advisory published 2020-10-20

Successful exploitation of these vulnerabilities could crash the device being accessed, resulting in a buffer overflow condition that may allow remote code execution.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2020-6085UShigh7.5—
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network…
CVE-2020-6084UShigh7.5—
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network…
CVE-2020-6083UShigh7.5—
An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • Mitigation1794-AENT Flex I/O Series B

    Rockwell Automation recommends affected users ensure they are employing proper network segmentation and security controls when implementing the affected product.

  • Mitigation1794-AENT Flex I/O Series B

    Rockwell Automation recommends affected users ensure they are employing proper network segmentation and security controls when implementing the affected product.

  • Mitigation1794-AENT Flex I/O Series B

    Rockwell Automation recommends affected users ensure they are employing proper network segmentation and security controls when implementing the affected product.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan