ICSA-18-107-03_Rockwell Automation Stratix Services Router
Rockwell Automation reported these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-0175US | high8.0OT kritisch | KEV | ||
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthentic… | ||||
| CVE-2018-0167US | high8.8OT kritisch | KEV | ||
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow a… | ||||
| CVE-2018-0158US | high8.6OT kritisch | KEV | ||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a mem… | ||||
| CVE-2018-0151US | critical9.8OT kritisch | KEV | ||
A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of servi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationAllen-Bradley Stratix 5900 Services Router
CVE-2018-0151: Users who do not use the Adaptive QoS for DMVPN feature can deny all traffic destined to UDP port 18999 on an affected device by using a Control Plane Policing (CoPP) policy. If the Adaptive QoS for DMVPN feature is later configured, the device must be upgraded to an unaffected release of Cisco IOS Software or Cisco IOS XE Software and the CoPP policy must be removed.
- MitigationAllen-Bradley Stratix 5900 Services Router
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5900 Services Router
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
- MitigationAllen-Bradley Stratix 5900 Services Router
Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan