Lucene search

RockwellCVE-2023-1834

HistoryMay 11, 2023 - 7:15 p.m.

CVE-2023-1834

2023-05-1119:15:09

CWE-284

Rockwell

web.nvd.nist.gov

rockwell automation

kinetix 5500

v7.13

telnet

ftp

security vulnerability

unauthorized access

cve-2023-1834

CVSS3

9.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

39.4%

JSON

Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running v7.13 may have the telnet and FTP ports open by default. This could potentially allow attackers unauthorized access to the device through the open ports.

Affected configurations

Nvd

Node

rockwellautomationkinetix_5500_firmwareMatch7.13

AND

rockwellautomationkinetix_5500Match-

VendorProductVersionCPE
rockwellautomationkinetix_5500_firmware7.13cpe:2.3:o:rockwellautomation:kinetix_5500_firmware:7.13:*:*:*:*:*:*:*
rockwellautomationkinetix_5500-cpe:2.3:h:rockwellautomation:kinetix_5500:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rockwellautomation	kinetix_5500_firmware	7.13	cpe:2.3:o:rockwellautomation:kinetix_5500_firmware:7.13:::::::*
rockwellautomation	kinetix_5500	-	cpe:2.3:h:rockwellautomation:kinetix_5500:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Kinetix 5500 EtherNet/IP Servo Drive",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "7.13"
      }
    ]
  }
]

References

rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139441

www.cisa.gov/news-events/ics-advisories/icsa-23-131-09

CVSS3

9.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

39.4%

JSON

Related for CVE-2023-1834