CVE-2014-5410
0.05%V4
2014-10-03
18h00 +00:00
18h00 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Rockwell Automation Micrologix 1400 Improper Input Validation
The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption) via malformed packets over (1) an Ethernet network or (2) a serial line.CVE 解決方案
Rockwell Automation has released a new version of MicroLogix 1400
Series B firmware to address the vulnerability and reduce associated
risk to successful exploitation. Subsequent versions of MicroLogix 1400
Series B firmware and newer will incorporate these same enhancements.
Rockwell Automation recommends the following immediate mitigation
strategies (when possible, multiple strategies should be employed
simultaneously):
* Upgrade all MicroLogix 1400 Series B controllers to Series B FRN
15.001 or higher. Current firmware for the MicroLogix 1400 Series B
platform can be obtained at the following web address:
http://www.rockwellautomation.com/rockwellautomation/support/pcdc.page
Please refer to Rockwell Automation’s product disclosure (AID 620295) for more information on this topic available at:
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/620295
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Improper Input Validation The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
||
| Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources. |
指標
| 指標 | 評分 | 嚴重程度 | CVSS 向量 | 來源 |
|---|---|---|---|---|
| V2 | 7.1 | AV:N/AC:M/Au:N/C:N/I:N/A:C |
EPSS
EPSS 是一種預測漏洞被利用可能性的評分模型。
EPSS 評分
EPSS 模型產生介於 0 到 1（0% 到 100%）之間的概率分數。分數越高，漏洞被利用的概率越大。
EPSS 百分位數
百分位數用於根據 EPSS 分數對 CVE 進行排名。例如，EPSS 評分在第 95 百分位的 CVE 比 95% 的其他 CVE 更有可能被利用。因此，百分位數用於比較某 CVE 的 EPSS 分數與其他 CVE 的相對位置。
相關產品
設定 0
Rockwellautomation>>Ab_micrologix_controller >> Version 1400
參考資料
https://ics-cert.us-cert.gov/advisories/ICSA-14-254-02
Tags : Third Party Advisory, US Government Resource
Tags : Third Party Advisory, US Government Resource
