ICSA-21-189-01

icsaUScisa_csaf_ot

Rockwell Automation MicroLogix 1100

Advisory ansehen veröffentlicht 2021-07-08

Successful exploitation of this vulnerability could allow an attacker to create a denial-of-service condition.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-33012UShigh8.6—
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is swi…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (1)

  • MitigationMicroLogix 1100

    A controller in this fault state can be recovered by downloading a new project or an offline copy of the project to the controller. Rockwell Automation recommends users set the controller switch to RUN mode to prevent remote programming. Users are encouraged to have a backup copy of the project in the case it is necessary to recover from an event. Rockwell Automation also recommends users should consider migrating to the Micro870 controller.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan