Rockwell Automation FactoryTalk Edge Gateway

Summary

Vulnerabilities 1

• Unscored —
  CVE-2021-35940

  Regression of CVE-2017-12613

  An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 a…

  Apache Software Foundation Apache Portable Runtime (APR) apr apr Debian Ubuntu Alpine
  Aug 23, 2021

Revision history

1. 2023-06-13 #1

   Initial Publication

References

• ICSA Advisory ICSA-23-164-03 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-23-164-03
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B