Skip to content
OpenAdvisories
Critical ICSA-23-026-06 2 CVEs

Rockwell Automation products using GoAhead Web Server

Published Jan 26, 2023 · Updated Jan 26, 2023

Vendor: Rockwell Automation Product: 1732E-8CFGM8R/A Product: 1732E-8IOLM12R Product: 1732E-IB8M8SOER Product: 1732E-IF4M12R/A (discontinued) Product: 1732E-IR4IM12R/A Product: 1732E-IT4IM12R/A Product: 1732E-OB8M8SR/A Product: 1732E-OF4M12R/A Product: 1747-AENTR Product: 1756-EN2F/C Product: 1756-EN2T/D Product: 1756-EN2TP/A Product: 1756-EN2TR/C Product: 1756-EN2TSC/B Product: 1756-EN2TSC/B (discontinued) Product: 1756-HIST1G/A (discontinued) Product: 1756-HIST2G/A(discontinued) Product: 1756-HIST2G/B Product: 1765 - EN3TR/B Product: 1769-AENTR Product: 5069-AEN2TR Product: Compact GuardLogix® 5380 controllers Product: CompactLogix 5380 controllers Product: CompactLogix 5480 controllers Product: ControlLogix 5580 controllers Product: GuardLogix 5580 controllers

Summary

Successful exploitation of these vulnerabilities could have a high impact on the confidentiality, integrity, and availability of the vulnerable devices.

Vulnerabilities 2

  • Critical 9.8
    CVE-2019-5096 Public exploit EPSS 67%

    An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base G…

  • Medium 5.3
    CVE-2019-5097 EPSS 45%

    A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web ser…

Revision history

  1. #1

    Publication Date

References