Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A)

Summary

Vulnerabilities 2

• Critical 10.0
  CVE-2023-20198 Exploited Public exploit Scanner template EPSS 100%

  Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IO…

  Cisco Cisco IOS XE Software iOS Network devices
  Oct 16, 2023

  KEV Oct 16, 2023
• High 7.2
  CVE-2023-20273 Exploited Public exploit EPSS 93%

  A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject …

  Cisco Cisco IOS XE Software iOS Network devices
  Oct 24, 2023

  KEV Oct 23, 2023

Revision history

1. 2023-11-21 #2

   Additional CVE added in the the vulnerability overview and mitigation section amended

2. 2023-10-24 #1

   Initial Publication

References

• ICSA Advisory ICSA-23-297-01 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-23-297-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B