PT-2017-13206 · Rockwell Automation · Factorytalk Alarms/Events

Publicado 2017-12-23 · Atualizado 2019-10-09 · CVE-2017-14022

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Alarms and Events versions 2.90 and earlier

Description An issue with improper input validation was found, allowing an unauthenticated attacker with remote network access to send specially crafted packets to Port 403/TCP, which is used by the history archiver service. This can cause the service to either stall or terminate.

Recommendations For versions 2.90 and earlier, consider restricting access to Port 403/TCP to prevent exploitation until a fix is available. As a temporary workaround, limiting network access to the history archiver service may help minimize the risk of service disruption.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-14022

Produtos afetados

Factorytalk Alarms/Events

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-14022 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-14022 · Aviso do Fabricante
• http://securityfocus.com/bid/102114 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-17-341-02 · Nota