Rockwell Automation Major nonrecoverable fault in 5015 – AENFTXT
Published Jul 16, 2024
8.7
HIGHCVSS 4.0
EPSS 2.12%
Description
An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent, causing the secondary adapter to result in a major nonrecoverable fault. If exploited, a power cycle is required to recover the product.
Affected products
-
- Version v2.011StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Rockwell Automation | 5015 - Aenftxt | unaffected |
|
- 2.011
Running on/with
- n/a
-
- Version v2.011StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Rockwell Automation | 5015 Aenftxt | n/a |
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Customers using the affected software are encouraged to apply the risk mitigations, if possible.
* Update to the corrected firmware revision, v2.012.
* For information on how to mitigate Security Risks on industrial automation control systems, we encourage customers to implement our suggested security best practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight to minimize the risk of the vulnerability.
References (1)
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1680.html Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1680.html | Vendor Advisory |
Change history (0)
No recorded changes yet.