PT-2017-10073
CVE-2016-9343
·
Publicado
2017-02-13
·
Atualizado
2022-02-03
Descrição por
CVSS 3.1
10
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Rockwell Automation Logix5000 Programmable Automation Controller versions 16.00 through 21.00
Description
An issue allows an attacker to potentially execute code on the controller or initiate a denial of service by sending a malformed common industrial protocol (CIP) packet, which can overflow a stack-based buffer.
Recommendations
For versions 16.00 through 21.00, consider restricting access to the CIP protocol until a fix is available to prevent potential exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾