Rockwellautomation Schwachstellen

Zeitverlauf

Typ

Produkt

Rockwellautomation CompactLogix 5370 L12
Rockwellautomation CompactLogix 5370 L22
Rockwellautomation CompactLogix 5370 L32
Rockwellautomation Compact GuardLogix 53702
Rockwellautomation Armor Compact GuardLogix 53702

Massnahmen

Official Fix1
Temporary Fix0
Workaround2
Unavailable0
Not Defined7

Ausnutzbarkeit

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined10

Zugriffsart

Not Defined0
Physical0
Local1
Adjacent0
Network9

Authentisierung

Not Defined0
High0
Low0
None10

Benutzeraktivität

Not Defined0
Required0
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤63
≤71
≤81
≤91
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤63
≤71
≤81
≤92
≤103

VulDB

≤10
≤20
≤30
≤40
≤50
≤64
≤70
≤82
≤90
≤104

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k7
<5k3
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploit heute

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (12): 1756-ENBT series A (1), Ab Micrologix Controller (1), Ab Micrologix Controller 1100 (1), Armor Compact GuardLogix 5370 (2), Compact GuardLogix 5370 (2), CompactLogix 5370 L1 (2), CompactLogix 5370 L2 (2), CompactLogix 5370 L3 (2), FactoryTalk (2), FactoryTalk Diagnostics Viewer (1), RSLinx Classic (1), RSLogix (1)

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
01.05.20196.46.3Rockwellautomation Armor Compact GuardLogix 5370 SMTP PufferüberlaufAutomation SoftwareNot DefinedWorkaround0.012330.00CVE-2019-10954
01.05.20198.58.4Rockwellautomation Armor Compact GuardLogix 5370 Web Server PufferüberlaufAutomation SoftwareNot DefinedWorkaround0.010290.03CVE-2019-10952
08.12.20127.57.5Rockwellautomation Ab Micrologix Controller Denial of ServiceAutomation SoftwareNot DefinedNot Defined0.002830.00CVE-2012-4690
02.04.20125.35.3Rockwellautomation FactoryTalk PufferüberlaufAutomation SoftwareNot DefinedNot Defined0.000810.02CVE-2012-0222
02.04.20125.35.3Rockwellautomation FactoryTalk unspecified erweiterte RechteAutomation SoftwareNot DefinedNot Defined0.100970.00CVE-2012-0221
16.09.20115.35.3Rockwellautomation RSLogix Utility RsvcHost.exe PufferüberlaufAutomation SoftwareNot DefinedNot Defined0.007660.00CVE-2011-3489
28.07.20119.38.9Rockwellautomation FactoryTalk Diagnostics Viewer Configuration File PufferüberlaufAutomation SoftwareNot DefinedOfficial Fix0.000430.00CVE-2011-2957
22.06.201110.010.0Rockwellautomation RSLinx Classic Installation RSHWare.exe PufferüberlaufAutomation SoftwareNot DefinedNot Defined0.014120.00CVE-2011-2530
05.08.201010.010.0Rockwellautomation 1756-ENBT series A Firmware perform erweiterte RechteAutomation SoftwareNot DefinedNot Defined0.482590.02CVE-2010-2965
19.01.20109.89.8Rockwellautomation Ab Micrologix Controller 1100 Denial of ServiceAutomation SoftwareNot DefinedNot Defined0.001610.02CVE-2009-3739

Do you need the next level of professionalism?

Upgrade your account now!