ICSA-23-026-06

icsaUScisa_csaf_ot

Rockwell Automation products using GoAhead Web Server

view advisory published 2023-01-26

Successful exploitation of these vulnerabilities could have a high impact on the confidentiality, integrity, and availability of the vulnerable devices.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2019-5097UShigh7.5—
A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A spe…
CVE-2019-5096UScritical9.8Exploit
An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server application in versions v5.0.1, v.4.1.1 and…
02

references

External citations — patches, advisories, analysis.

03

remediations (54)

  • Mitigation1732E-8CFGM8R/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-8CFGM8R/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-8IOLM12R

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-8IOLM12R

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-IB8M8SOER

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-IB8M8SOER

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-IF4M12R/A (discontinued)

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-IF4M12R/A (discontinued)

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-IR4IM12R/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-IR4IM12R/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-IT4IM12R/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-IT4IM12R/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-OB8M8SR/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-OB8M8SR/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-OF4M12R/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1732E-OF4M12R/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1747-AENTR

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1747-AENTR

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756- EN2T/D

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756- EN2T/D

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2F/C

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2F/C

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2T/D

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2T/D

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2TP/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2TP/A

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2TR/C

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2TR/C

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2TSC/B

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2TSC/B

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2TSC/B (discontinued)

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-EN2TSC/B (discontinued)

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-HIST1G/A (discontinued)

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-HIST1G/A (discontinued)

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-HIST2G/A(discontinued)

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-HIST2G/A(discontinued)

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-HIST2G/B

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1756-HIST2G/B

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1765 - EN3TR/B

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1765 - EN3TR/B

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1769-AENTR

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation1769-AENTR

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation5069-AEN2TR

    1756-EN2F/C: Update to 11.002 or later

  • Mitigation5069-AEN2TR

    1756-EN2F/C: Update to 11.002 or later

  • MitigationCompact GuardLogix 5380 controllers

    1756-EN2F/C: Update to 11.002 or later

  • MitigationCompact GuardLogix 5380 controllers

    1756-EN2F/C: Update to 11.002 or later

  • MitigationCompactLogix 5380 controllers

    1756-EN2F/C: Update to 11.002 or later

  • MitigationCompactLogix 5380 controllers

    1756-EN2F/C: Update to 11.002 or later

  • MitigationCompactLogix 5480 controllers

    1756-EN2F/C: Update to 11.002 or later

  • MitigationCompactLogix 5480 controllers

    1756-EN2F/C: Update to 11.002 or later

  • MitigationControlLogix 5580 controllers

    1756-EN2F/C: Update to 11.002 or later

  • MitigationControlLogix 5580 controllers

    1756-EN2F/C: Update to 11.002 or later

  • MitigationGuardLogix 5580 controllers

    1756-EN2F/C: Update to 11.002 or later

  • MitigationGuardLogix 5580 controllers

    1756-EN2F/C: Update to 11.002 or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan