ICSA-20-294-01

icsaUScisa_csaf_ot

Rockwell Automation 1794-AENT Flex I/O Series B

Advisory ansehen veröffentlicht 2020-10-20

Successful exploitation of these vulnerabilities could crash the device being accessed, resulting in a buffer overflow condition that may allow remote code execution.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-6085UShigh7.5—
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network…
CVE-2020-6084UShigh7.5—
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network…
CVE-2020-6083UShigh7.5—
An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (3)

  • Mitigation1794-AENT Flex I/O Series B

    Rockwell Automation recommends affected users ensure they are employing proper network segmentation and security controls when implementing the affected product.

  • Mitigation1794-AENT Flex I/O Series B

    Rockwell Automation recommends affected users ensure they are employing proper network segmentation and security controls when implementing the affected product.

  • Mitigation1794-AENT Flex I/O Series B

    Rockwell Automation recommends affected users ensure they are employing proper network segmentation and security controls when implementing the affected product.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan