Unscored CVE-2018-14821 EUVD-2018-6705GHSA-g2xj-449r-g2rx

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to inten…

Published Sep 20, 2018 · Updated Sep 17, 2024 · Assigned by icscert

Vendor: Rockwell Automation Product: RSLinx Classic® Category: ICS / OT

Description

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to Port 44818, causing the RSLinx Classic application to terminate. The user will need to manually restart the software to regain functionality.

Affected products

Vendor	Product	Affected	Fixed
Rockwell Automation	RSLinx Classic	4.00.01 and prior	—

Advisories 1

ICSA-18-263-02 Rockwell Automation RSLinx Classic CISA ICS & IT advisories · Sep 20, 2018

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02
https://www.tenable.com/security/research/tra-2018-26