CVE-2025-7350

CVE-2025-7350 maps to a Cross-Site Request Forgery that enables remote code execution in Rockwell Stratix Stratix IOS devices (5410, 5700, 8000). The vulnerability allows an unauthenticated attacker to upload and run malicious configurations, leading to RCE. Affected products are Stratix IOS on R...

CVE-2025-7350 Rockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution Vulnerability

A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by uploading and running malicious configurations without authentication...

CVE-2025-7350 Rockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution Vulnerability

A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by uploading and running malicious configurations without authentication...

CISA Releases Fourteen Industrial Control Systems Advisories

CISA released fourteen Industrial Control Systems ICS advisories on September 9, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-252-01 Rockwell Automation ThinManager ICSA-25-252-02 ABB Cylon Aspect BMS/BAS...

Rockwell Automation Stratix IOS

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to run malicious configurations without authentication. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

Rockwell Automation Stratix IOS 安全漏洞

Rockwell Automation Stratix IOS is an industrial operating system from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Stratix IOS that originates from an unverified upload of a malicious configuration that could lead to remote code execution...

PT-2025-36722

Name of the Vulnerable Software and Affected Versions: Cisco Stratix 5410, 5700, and 8000 devices versions prior to IOS 15.28E6 Rockwell Stratix devices versions prior to IOS 15.28E6 Description: A security issue affects Cisco and Rockwell Stratix devices, potentially leading to remote code...

CVE-2023-41092

Unchecked return value in SDM firmware for IntelR Stratix 10 and IntelR Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2020-8737

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...

PT-2025-52656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to the stratix10-svc firmware. The problem stems from incorrect usage of the platform set drvdata and dev set drvdata functions, which both...

CVE-2023-41092

Unchecked return value in SDM firmware for IntelR Stratix 10 and IntelR Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2023-41092

The CVE concerns the Secure Device Manager (SDM) firmware for Intel Stratix 10 and Intel Agilex 7 FPGA products. The root cause is an unchecked return value in SDM firmware, affecting firmware versions prior to 23.3. The vulnerability could let an authenticated user trigger a denial-of-service vi...

CVE-2023-41092

Unchecked return value in SDM firmware for IntelR Stratix 10 and IntelR Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of service via adjacent access...

PT-2024-12918 · Intel · Intel Stratix 10 +1

Name of the Vulnerable Software and Affected Versions: IntelR Stratix 10 and IntelR Agilex 7 FPGAs versions prior to 23.3 Description: The issue is related to an unchecked return value in the SDM firmware, which may allow an authenticated user to potentially enable denial of service via adjacent...

Intel Stratix 10 和 Intel Agilex 7 FPGAs 安全漏洞

Intel FPGAs Pro Edition Software is a fully supported software development kit for FPGA Field-Programmable Gate Array developers from Intel Corporation. A security vulnerability previously existed in Intel Stratix 10 and Intel Agilex 7 FPGAs version 23.3, which stemmed from an unchecked return...

Rockwell Automation Stratix Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service (CVE-2016-6381)

A vulnerability in the Internet Key Exchange version 1 IKEv1 fragmentation code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an exhaustion of available memory or a reload of the affected system. The vulnerability is due to the improper handling of...

Rockwell Automation Stratix NAK to the Future: NTP Symmetric Association Authentication Bypass (CVE-2015-7871)

Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...

Rockwell Automation Stratix Denial of Service CRYPTO_ASSOC Memory Leak (CVE-2015-7701)

Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...

Rockwell Automation Stratix OpenSSL Base64 Decoding Memory Corruption (CVE-2015-0292)

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or corrupt portions of OpenSSL process memory. This plugin only works with Tenable.ot. Pleas...

Rockwell Automation Stratix Network Time Protocol Password Length Memory Corruption (CVE-2015-7854)

Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...