ICSA-22-354-04

icsaUScisa_csaf_ot

Rockwell Automation MicroLogix 1100 and 1400

Advisory ansehen veröffentlicht 2022-12-20

Successful exploitation of these vulnerabilities could create a denial-of-service condition or allow for remote code execution.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-46670USmedium6.1—
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnera…
CVE-2022-3166UShigh7.5—
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The secu…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

  • MitigationMicroLogix 1100

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1100

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1400 A

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1400 A

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1400 B/C

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1400 B/C

    Configure firewalls to disallow network communication through HTTP/Port 802

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan