Skip to content
OpenAdvisories
High ICSA-19-094-03 5 CVEs

Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700

Published Apr 4, 2019 · Updated Apr 4, 2019

Vendor: Rockwell Automation Product: Allen-Bradley ArmorStratix 5700 Product: Allen-Bradley Stratix 5400 Product: Allen-Bradley Stratix 5410 Product: Allen-Bradley Stratix 5700 Product: Allen-Bradley Stratix 8000 Product: Allen-Bradley Stratix 8300

Summary

Successful exploitation of these vulnerabilities could result in a denial-of-service condition or time synchronization issues across the network via reloading the device, a buffer overflow, or memory exhaustion.

Vulnerabilities 5

  • Unscored —
    CVE-2018-0466

    Cisco IOS and IOS XE Software OSPFv3 Denial of Service Vulnerability

    A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect handling of speci…

    Cisco Cisco IOS Software iOS Network devices
  • Unscored —
    CVE-2018-0467

    Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability

    A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could e…

    Cisco Cisco IOS Software iOS Network devices
  • Unscored —
    CVE-2018-0470

    Cisco IOS XE Software HTTP Denial of Service Vulnerability

    A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to the affecte…

    Cisco Cisco IOS XE Software iOS Network devices
  • Unscored —
    CVE-2018-0473

    Cisco IOS Software Precision Time Protocol Denial of Service Vulnerability

    A vulnerability in the Precision Time Protocol (PTP) subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Precision Time Protocol. The vulnerability is due to insufficient processi…

    Cisco Cisco IOS Software iOS Network devices
  • Unscored —
    CVE-2018-15373

    Cisco IOS and IOS XE Software Cisco Discovery Protocol Denial of Service Vulnerability

    A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service (DoS) c…

    Cisco Cisco IOS Software iOS Network devices

Revision history

  1. #1

    ICSA-19-094-03 Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700

References