Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to take control of the affected system.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-20273US | high7.2OT kritisch | KEV | ||
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is d… | ||||
| CVE-2023-20198US | critical10.0OT kritisch | KEV | ||
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-297-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-297-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationStratix 5200 (running Cisco IOS XE Software with the Web UI feature enabled)
Rockwell Automation strongly encourages customers to follow guidance disabling Stratix HTTP servers on all internet-facing systems.
- MitigationStratix 5200 (running Cisco IOS XE Software with the Web UI feature enabled)
Rockwell Automation strongly encourages customers to follow guidance disabling Stratix HTTP servers on all internet-facing systems.
- MitigationStratix 5800 (running Cisco IOS XE Software with the Web UI feature enabled)
Rockwell Automation strongly encourages customers to follow guidance disabling Stratix HTTP servers on all internet-facing systems.
- MitigationStratix 5800 (running Cisco IOS XE Software with the Web UI feature enabled)
Rockwell Automation strongly encourages customers to follow guidance disabling Stratix HTTP servers on all internet-facing systems.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan