ICS Advisory: Rockwell Automation Stratix 5800 and Stratix 5200

News Cybersecurity English Guidance

Date: 24th Oct, 2023 Source: Cybersecurity and Infrastructure Security Agency Country: USA Original Source

Brief

Summary

A vulnerability has been identified in Rockwell Automation's Stratix 5800 and Stratix 5200 products, which run Cisco IOS XE Software with the Web UI feature enabled. The vulnerability, assigned CVE-2023-20198, allows an unauthenticated attacker to create an account with privilege level 15 access and potentially gain control of the affected system. The vulnerability has a CVSS v3 base score of 10.0 and is exploitable remotely with low attack complexity. Rockwell Automation recommends disabling the HTTP server feature, using more secure access methods, and implementing other defensive measures to minimize the risk of exploitation.

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity/known public exploitation Vendor: Rockwell Automation Equipment: Stratix 5800 and Stratix 5200 Vulnerabilities: Unprotected Alternate Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to take control of the affected system. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The

This content is restricted.

Highlights content goes here...

This content is restricted.

Cybersecurity and Infrastructure Security Agency

RADA.AI

Hello! I'm RADA.AI - Regulatory Analysis and Decision Assistance. Your Intelligent guide for compliance and decision-making. How can i assist you today?

Suggested

ICS Advisory: Rockwell Automation Stratix 5800 and Stratix 5200

Brief

Cybersecurity and Infrastructure Security Agency

Form successfully submitted. One of our GRI rep will contact you shortly

Thanking You!

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.

ICS Advisory: Rockwell Automation Stratix 5800 and Stratix 5200

Brief

Cybersecurity and Infrastructure Security Agency

Form successfully submitted. One of our GRI rep will contact you shortly

Thanking You!

Enter your Email

Verify OTP

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.