Skip to content
OpenAdvisories
Critical 8 exploited CVEs ICSA-18-107-04 8 CVEs

Rockwell Automation Stratix and ArmorStratix Switches

Published Apr 17, 2018 · Updated Apr 17, 2018

Vendor: Rockwell Automation Product: Allen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments Product: Allen-Bradley Stratix 5400 Industrial Ethernet Switches Product: Allen-Bradley Stratix 5410 Industrial Distribution Switches Product: Allen-Bradley Stratix 5700 Industrial Managed Ethernet Switches Product: Allen-Bradley Stratix 8000 Modular Managed Ethernet Switches

Summary

Successful exploitation of these vulnerabilities could result in loss of availability, confidentiality, and/or integrity caused by memory exhaustion, module restart, information corruption, and/or information exposure.

Vulnerabilities 8

  • High 8.8
    CVE-2018-0167 Exploited

    Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, C…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0158 Exploited

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software c…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0172 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0173 Exploited

    A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 infor…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0174 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • High 8.0
    CVE-2018-0175 Exploited

    Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE S…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0156 Exploited

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0171 Exploited Public exploit Scanner template EPSS 99%

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

    iOS
    KEV Nov 3, 2021

Revision history

  1. #1

    ICSA-18-107-04 Rockwell Automation Stratix and ArmorStratix Switches

References