CVE-2016-5645

Опубликовано: 24 авг. 2016

Источник: nvd

CVSS3: 7.3

CVSS2: 7.5

EPSS Средний

Описание

Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community.

Ссылки

http://www.securityfocus.com/bid/92428
https://ics-cert.us-cert.gov/advisories/ICSA-16-224-01
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/92428
https://ics-cert.us-cert.gov/advisories/ICSA-16-224-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:rockwellautomation:1766-l32awa:-:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:1766-l32awaa:-:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:1766-l32bwa:-:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:1766-l32bwaa:-:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:1766-l32bxb:-:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:1766-l32bxba:-:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.30312

Средний

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-284

Связанные уязвимости

GHSA-7rcm-5vjr-c8pg