High ICSA-20-294-01 3 CVEs

Rockwell Automation 1794-AENT Flex I/O Series B

Published Oct 20, 2020 · Updated Oct 20, 2020

Vendor: Rockwell Automation Product: 1794-AENT Flex I/O Series B

Summary

Successful exploitation of these vulnerabilities could crash the device being accessed, resulting in a buffer overflow condition that may allow remote code execution.

Vulnerabilities 3

High 7.5

CVE-2020-6083

An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Brad…

Oct 14, 2020
High 7.5

CVE-2020-6084

An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-B…

Oct 19, 2020
High 7.5

CVE-2020-6085

An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-B…

Oct 19, 2020

Revision history

2020-10-20 #1
ICSA-20-294-01 Rockwell Automation 1794-AENT Flex I-O Series B

References

ICS Advisory ICSA-20-294-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-294-01
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B