Critical ICSA-18-263-02 3 CVEs

Rockwell Automation RSLinx Classic

Published Sep 20, 2018 · Updated Sep 20, 2018

Vendor: Rockwell Automation Product: RSLinx Classic®

Summary

Successful exploitation of these vulnerabilities could crash the device being accessed or allow arbitrary code execution on the device.

Vulnerabilities 3

Unscored —

CVE-2018-14821

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated t…

Rockwell Automation RSLinx Classic® ICS / OT

Sep 20, 2018
Unscored —

CVE-2018-14827

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally…

Rockwell Automation RSLinx Classic® ICS / OT

Sep 20, 2018
Unscored —

CVE-2018-14829 EPSS 16%

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to in…

Rockwell Automation RSLinx Classic® ICS / OT

Sep 20, 2018

Revision history

2018-09-20 #1
ICSA-18-263-02 Rockwell Automation RSLinx Classic

References

ICS Advisory ICSA-18-263-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-263-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B