Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-42260US | high7.5 | Exploit | ||
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICSA Advisory ICSA-26-244-05 JSONself
- ICSA Advisory ICSA-26-244-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- MitigationCompact GuardLogix 5380
Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.
- MitigationCompactLogix 5380
Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.
- MitigationCompactLogix 5480
Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.
- MitigationControlLogix 5580
Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.
- MitigationGuardLogix 5580
Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.
- BehobenCompact GuardLogix 5380
Rockwell Automation recommends users update to firmware version 34.015 and later.
- BehobenCompactLogix 5380
Rockwell Automation recommends users update to firmware version 34.015 and later.
- BehobenCompactLogix 5480
Rockwell Automation recommends users update to firmware version 34.015 and later.
- BehobenControlLogix 5580
Rockwell Automation recommends users update to firmware version 34.015 and later.
- BehobenGuardLogix 5580
Rockwell Automation recommends users update to firmware version 34.015 and later.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan