ICSA-24-193-19

icsaUScisa_csaf_ot

Rockwell Automation FactoryTalk System Services and Policy Manager

Advisory ansehen veröffentlicht 2024-07-11

Successful exploitation of these vulnerabilities could allow an attacker to obtain private keys, which would result in impersonating resources on the secured network.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-6325USmedium6.5OT erhöht—
The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html…
CVE-2024-6236UShigh7.5—
Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • MitigationFactoryTalk Policy Manager

    (migrating from v6.40 only) Deploy (OPC UA). Ensure all endpoints were reset successfully.

  • MitigationFactoryTalk Policy Manager

    (migrating from v6.40 only) Deploy (OPC UA). Ensure all endpoints were reset successfully.

  • MitigationFactoryTalk System Services

    (migrating from v6.40 only) Deploy (OPC UA). Ensure all endpoints were reset successfully.

  • MitigationFactoryTalk System Services

    (migrating from v6.40 only) Deploy (OPC UA). Ensure all endpoints were reset successfully.

  • BehobenFactoryTalk Policy Manager

    7) Install FactoryTalk Policy Manager version 6.40.01. Restart the computer when prompted at the end of the install. Open FTPM. FTPM will attempt to connect to the FactoryTalk System Services web server before proceeding. If FTPM could not successfully connect to FactoryTalk System Services (FTSS), it is because the FTSS service hasn't started yet. It will eventually start or else you can start the FTSS service manually in Windows Services.

  • BehobenFactoryTalk Policy Manager

    7) Install FactoryTalk Policy Manager version 6.40.01. Restart the computer when prompted at the end of the install. Open FTPM. FTPM will attempt to connect to the FactoryTalk System Services web server before proceeding. If FTPM could not successfully connect to FactoryTalk System Services (FTSS), it is because the FTSS service hasn't started yet. It will eventually start or else you can start the FTSS service manually in Windows Services.

  • BehobenFactoryTalk System Services

    3) Delete the \keystore folder: c:\ProgramData\Rockwell Automation\FactoryTalk System Services\keystore

  • BehobenFactoryTalk System Services

    3) Delete the \keystore folder: c:\ProgramData\Rockwell Automation\FactoryTalk System Services\keystore

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan