Rockwell Automation ControlLogix Ethernet Modules
Successful exploitation of this vulnerability could allow remote attackers to perform memory dumps, modify memory, and control execution flow.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-7353US | —OT erhöht | — | ||
A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB ag… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-226-28 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-226-28 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- Mitigation1756-EN2F/C
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101 - Mitigation1756-EN2T/D
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101 - Mitigation1756-EN2TP/A
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101 - Mitigation1756-EN2TR/C
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101 - Mitigation1756-EN3TR/B
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan