CVE-2018-19282

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

5.64%

Published

Apr 4, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Industrial Protocol (CIP) network stack. The vulnerability allows the attacker to crash the CIP in a way that it does not accept new connections, but keeps the current connections active, which can prevent legitimate users from recovering control.

Weaknesses (CWE)

CWE-400

Affected Products (2)

rockwellautomation · powerflex_525_ac_drives_firmwarevulnerable

rockwellautomation · powerflex_525_ac_drives

References (4)

https://applied-risk.com/application/files/4215/5385/2294/Advisory_AR2019004_Rockwell_Powerflex_525_Denial_of_Service.pdf

Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-19-087-01

Third Party AdvisoryUS Government Resource

https://applied-risk.com/application/files/4215/5385/2294/Advisory_AR2019004_Rockwell_Powerflex_525_Denial_of_Service.pdf

Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-19-087-01

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs