Remote Unauthenticated Access Vulnerability in RSLinx Classic by Rockwell Automation
CVE-2018-14821

7.5HIGH

Key Information:

Vendor

Rockwell Automation
Status
Rslinx Classic
Vendor
CVE Published:
20 September 2018

What is CVE-2018-14821?

The RSLinx Classic application by Rockwell Automation is susceptible to a vulnerability that allows unauthenticated attackers to send malformed CIP packets to Port 44818. This can lead to the application terminating unexpectedly, resulting in service disruption. Users must manually restart the application to restore functionality, highlighting the importance of effective monitoring and prompt remediation of this issue to maintain operational continuity.

Affected Version(s)

RSLinx Classic 4.00.01 and prior

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02
x_refsource_MISC
https://www.tenable.com/security/research/tra-2018-26
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.