ICSA-23-131-14

icsaUScisa_csaf_ot

Rockwell Automation PanelView 800

view advisory published 2023-05-11

Successful exploitation of these vulnerabilities could allow remote code execution.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2020-36177UScritical9.8—
RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.
CVE-2019-16748UScritical9.8—
In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffe…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • FixedPanelView 800-2711R-T10T

    Ensure the email feature is disabled (it is disabled by default).

  • FixedPanelView 800-2711R-T10T

    Ensure the email feature is disabled (it is disabled by default).

  • FixedPanelView 800-2711R-T4T

    Ensure the email feature is disabled (it is disabled by default).

  • FixedPanelView 800-2711R-T4T

    Ensure the email feature is disabled (it is disabled by default).

  • FixedPanelView 800-2711R-T7T

    Ensure the email feature is disabled (it is disabled by default).

  • FixedPanelView 800-2711R-T7T

    Ensure the email feature is disabled (it is disabled by default).

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan