ICSA-24-030-07

icsaUScisa_csaf_ot

Rockwell Automation LP30/40/50 and BM40 Operator Interface

view advisory published 2024-01-30

Successful exploitation of these vulnerabilities could allow an authenticated attacker to use specifically crafted communication requests to perform a denial-of-service condition, memory overwriting, or remote code execution.

01

describes (15)

Related CVEs.

IDseverity exploitable
CVE-2022-47393US——
An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products…
CVE-2022-47392US——
An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions…
CVE-2022-47390UShigh8.8—
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write da…
CVE-2022-47389US——
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write da…
CVE-2022-47388US——
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write da…
CVE-2022-47387US——
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write dat…
CVE-2022-47386US——
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write da…
CVE-2022-47385US——
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write da…
CVE-2022-47384US——
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write dat…
CVE-2022-47383US——
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write da…
CVE-2022-47382US——
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write dat…
CVE-2022-47381US——
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can le…
CVE-2022-47380US——
An authenticated remote attacker may use a stack based  out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can l…
CVE-2022-47379US——
An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial…
CVE-2022-47378USmedium6.5—
Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific requests that use the vul…
02

references

External citations — patches, advisories, analysis.

03

remediations (60)

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationBM40 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP30 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP40 Operator Pane

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

  • MitigationLP50 Operator Panel

    Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan