Younes Dragoni

**Name of the Vulnerable Software and Affected Versions** IntelliBridge EC 40 and 60 Hub versions C.00.04 and prior **Description** The issue concerns hard-coded credentials, such as a password or a cryptographic key, used for inbound authentication, outbound communication to external components, or encryption of internal data. **Recommendations** For versions C.00.04 and prior, consider changing the hard-coded credentials to unique, secure credentials to mitigate the risk of exploitation. As a temporary workaround, restrict access to the affected system until a patch or update is available.

**Name of the Vulnerable Software and Affected Versions** JTEKT Corporation TOYOPUC product series versions All versions **Description** The issue arises when Ethernet communication of the JTEKT Corporation TOYOPUC product series is left in an open state by an attacker. As a result, Ethernet communications cannot be established with other devices, depending on the settings of the link parameters. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers versions 20 through 30 and earlier. **Description** An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering. **Recommendations** For versions 20 through 30 and earlier, a cold restart is required to recover from the issue. As a temporary workaround, consider restricting access to the web server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rockwell Automation RSLinx Classic versions 4.00.01 and prior **Description** The issue is related to an uncontrolled resource consumption vulnerability. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to "Port 44818", causing the software application to stop responding and crash, resulting in a denial of service. The user must restart the software to regain functionality. **Recommendations** For Rockwell Automation RSLinx Classic versions 4.00.01 and prior, consider restricting access to "Port 44818" to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the affected port in the software configuration to prevent potential crashes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rockwell Automation RSLinx Classic versions 4.00.01 and prior **Description** The issue is related to a buffer overflow in memory. It may allow a remote attacker to cause a denial of service by sending a specially crafted CIP packet to port 44818. This can cause the RSLinx Classic application to terminate, requiring a manual restart to regain functionality. **Recommendations** For versions 4.00.01 and prior, manually restart the software after a termination to regain functionality. As a temporary workaround, consider restricting access to port 44818 to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 **Description** The issue allows a specially crafted DLL file to be placed in the search path and loaded as an internal and valid DLL, which may allow arbitrary code execution. **Recommendations** For Emerson DeltaV DCS version 11.3.1, update to a version that includes a fix for this issue. For Emerson DeltaV DCS version 12.3.1, update to a version that includes a fix for this issue. For Emerson DeltaV DCS version 13.3.0, update to a version that includes a fix for this issue. For Emerson DeltaV DCS version 13.3.1, update to a version that includes a fix for this issue. For Emerson DeltaV DCS version R5, update to a version that includes a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 **Description** The issue is related to improper path validation, which may allow a remote attacker to replace executable files. This could potentially lead to security breaches. **Recommendations** For versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5, update to a version that properly validates paths to prevent executable file replacement. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rockwell Automation RSLinx Classic versions 4.00.01 and prior **Description** The issue allows a remote threat actor to send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. It also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code. This is due to a buffer overflow vulnerability in the ENGINE.dll file of the RSLinx Classic server, which can be exploited by sending specially crafted CIP packets to port 44818, potentially allowing an attacker to execute arbitrary code or cause a denial of service. **Recommendations** For versions 4.00.01 and prior, consider disabling access to Port 44818 as a temporary workaround until a patch is available. Restrict access to the ENGINE.dll file to minimize the risk of exploitation. Avoid using the `CIP` protocol in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GE PACSystems RX3i CPE305/310 versions 9.20 and prior GE PACSystems RX3i CPE330 version 9.21 and prior GE PACSystems RX3i CPE 400 version 9.30 and prior GE PACSystems RSTi-EP CPE 100 all versions GE PACSystems CPU320/CRU320 RXi all versions **Description** The device does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable. **Recommendations** For GE PACSystems RX3i CPE305/310 versions 9.20 and prior, update to a version later than 9.20. For GE PACSystems RX3i CPE330 version 9.21 and prior, update to a version later than 9.21. For GE PACSystems RX3i CPE 400 version 9.30 and prior, update to a version later than 9.30. For GE PACSystems RSTi-EP CPE 100 all versions, consider implementing additional security measures to prevent remote attacks. For GE PACSystems CPU320/CRU320 RXi all versions, consider implementing additional security measures to prevent remote attacks.

**Name of the Vulnerable Software and Affected Versions** Emerson Process Management ControlWave Micro Process Automation Controller versions prior to CWM v.05.78.00 **Description** A Stack-based Buffer Overflow issue was discovered, caused by sending crafted packets on Port 20547, which could force the PLC to change its state into halt mode. **Recommendations** For versions prior to CWM v.05.78.00, update the firmware to a version later than CWM v.05.78.00 to resolve the issue. As a temporary workaround, consider restricting access to Port 20547 to minimize the risk of exploitation.