Lucene search

[email protected]CVE-2018-19016

HistoryMar 27, 2019 - 6:29 p.m.

CVE-2018-19016

2019-03-2718:29:00

CWE-20

[email protected]

web.nvd.nist.gov

rockwell automation

ethernet/ip

web server modules

compactlogix

cve-2018-19016

nvd

denial of service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.7%

JSON

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected product is restarted.

CPENameOperatorVersion
rockwellautomation:ethernet\/ip_web_server_module_1756-ewebrockwellautomation ethernet\/ip web server module 1756-eweble5.001
rockwellautomation:ethernet\/ip_web_server_module_1768-ewebrockwellautomation ethernet\/ip web server module 1768-eweble2.005

CPE	Name	Operator	Version
rockwellautomation:ethernet\/ip_web_server_module_1756-eweb	rockwellautomation ethernet\/ip web server module 1756-eweb	le	5.001
rockwellautomation:ethernet\/ip_web_server_module_1768-eweb	rockwellautomation ethernet\/ip web server module 1768-eweb	le	2.005

References

ics-cert.us-cert.gov/advisories/ICSA-19-036-02

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.7%

JSON

Related for CVE-2018-19016

prion1 nessus2 ics1 cvelist1