Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h4mf-2q8r-28xx

Опубликовано: 16 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability.

An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability.

EPSS

Процентиль: 37%
0.00161
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability.

CVSS3: 7.5
fstec
почти 2 года назад

Уязвимость микропрограммного обеспечения EtherNet/IP-адаптеров Rockwell Automation 5015-AENFTXT, связанная с ошибками проверки корректности ввода, позволяющая нарушителю вызвать ошибку (MNRF) и отказ в обслуживании

EPSS

Процентиль: 37%
0.00161
Низкий

7.5 High

CVSS3

Дефекты

CWE-20