Rockwell Automation Stratix and ArmorStratix Switches
Successful exploitation of these vulnerabilities could result in loss of availability, confidentiality, and/or integrity caused by memory exhaustion, module restart, information corruption, and/or information exposure.
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-0175US | high8.0OT kritisch | KEV | ||
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthentic… | ||||
| CVE-2018-0174US | high8.6OT kritisch | KEV | ||
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affect… | ||||
| CVE-2018-0173US | high8.6OT kritisch | KEV | ||
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unau… | ||||
| CVE-2018-0172US | high8.6OT kritisch | KEV | ||
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affect… | ||||
| CVE-2018-0171US | critical9.8OT kritisch | KEV | ||
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected devi… | ||||
| CVE-2018-0167US | high8.8OT kritisch | KEV | ||
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow a… | ||||
| CVE-2018-0158US | high8.6OT kritisch | KEV | ||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a mem… | ||||
| CVE-2018-0156US | high7.5OT kritisch | KEV | ||
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected devi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-18-107-04 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (40)
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0156 - Snort Rule 41725
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0158 - Snort Rule 46110
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0171 - Snort Rule 46096 and 46097
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0172 - Snort Rule 46104
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0173 - Snort Rule 46119
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
CVE-2018-0174 - Snort Rule 46120
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 8000 Modular Managed Ethernet Switches
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan