High ICSA-23-236-06 1 CVE

Rockwell Automation Select Distributed I/O Communication Modules

Published Aug 24, 2023 · Updated Aug 24, 2023

Vendor: Rockwell Automation Product: 1732E-12X4M12P5QCDR Series A Product: 1732E-12X4M12QCDR Series A Product: 1732E-16CFGM12P5QCR Series A Product: 1732E-16CFGM12P5QCWR Series B Product: 1732E-16CFGM12QCR Series A Product: 1732E-16CFGM12QCWR Series A Product: 1732E-16CFGM12R Series B Product: 1732E-8X8M12DR Series B Product: 1732E-IB16M12DR Series B Product: 1732E-IB16M12R Series B Product: 1732E-OB16M12DR Series B Product: 1732E-OB16M12R Series B Product: 1734-AENT/1734-AENTR Series B Product: 1734-AENT/1734-AENTR Series C Product: 1738-AENT/ 1738-AENTR Series B Product: 1794-AENTR Series A Product: 1799ER-IQ10XOQ10 Series B

Summary

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service on the affected products.

Vulnerabilities 1

Critical 9.8

CVE-2022-1737

Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial…

Pyramid Solutions EtherNet/IP Adapter Development Kit (EADK) EtherNet/IP Adapter DLL Kit (EIPA) EtherNet/IP Scanner DLL Kit (EIPS)

Jul 12, 2022

Revision history

2023-08-24 #1
Initial Publication

References

ICSA Advisory ICSA-23-236-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-06
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B