CVE-2014-5410
0.05%V4
2014-10-03
18h00 +00:00
18h00 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Rockwell Automation Micrologix 1400 Improper Input Validation
The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption) via malformed packets over (1) an Ethernet network or (2) a serial line.CVE 解决方案
Rockwell Automation has released a new version of MicroLogix 1400
Series B firmware to address the vulnerability and reduce associated
risk to successful exploitation. Subsequent versions of MicroLogix 1400
Series B firmware and newer will incorporate these same enhancements.
Rockwell Automation recommends the following immediate mitigation
strategies (when possible, multiple strategies should be employed
simultaneously):
* Upgrade all MicroLogix 1400 Series B controllers to Series B FRN
15.001 or higher. Current firmware for the MicroLogix 1400 Series B
platform can be obtained at the following web address:
http://www.rockwellautomation.com/rockwellautomation/support/pcdc.page
Please refer to Rockwell Automation’s product disclosure (AID 620295) for more information on this topic available at:
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/620295
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Input Validation The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
||
| Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources. |
指标
| 指标 | 评分 | 严重程度 | CVSS 向量 | 来源 |
|---|---|---|---|---|
| V2 | 7.1 | AV:N/AC:M/Au:N/C:N/I:N/A:C |
EPSS
EPSS 是一种预测漏洞被利用可能性的评分模型。
EPSS 评分
EPSS 模型生成一个介于 0 到 1（即 0% 到 100%）之间的概率评分。评分越高，漏洞被利用的可能性越大。
EPSS 百分位
百分位用于根据 EPSS 评分对 CVE 进行排名。例如，EPSS 百分位为第 95 的 CVE，其被利用的可能性高于 95% 的其他 CVE。因此，百分位可用于比较不同 CVE 的 EPSS 评分。
相关产品
配置 0
Rockwellautomation>>Ab_micrologix_controller >> Version 1400
参考资料
https://ics-cert.us-cert.gov/advisories/ICSA-14-254-02
Tags : Third Party Advisory, US Government Resource
Tags : Third Party Advisory, US Government Resource
