Rockwell Stratix 5400/5410 Switch CVE-2016-1399 ICMP Resource Management Vulnerability

Key Information Summary Vulnerability Overview - Overview: Rockwell Automation has identified a resource management vulnerability in its Allen-Bradley Stratix 5400 and 5410 industrial network switches. - Remote Exploitability: The vulnerability can be exploited remotely. - Impact: Successful exploitation may allow remote attackers to affect traffic (or packets) transmitted through the affected devices. Affected Products - Product List: - Allen-Bradley Stratix 5400 Industrial Ethernet Switch, firmware versions 15.2(2)EA1, 15.2(2)EA2. - Allen-Bradley Stratix 5410 Industrial Distribution Switch, firmware version 15.2(2)EB. Impact and Context - Impact Description: The impact on individual organizations depends on unique factors, including their operational environment, architecture, and product implementation. - Context Information: Rockwell Automation is a U.S.-based company that provides industrial automation control and information products; the affected products are widely used across multiple industries. Vulnerability Characteristics - CVE ID: CVE-2016-1399NVD - CVSS Score: CVSS v3 base score of 5.8 - Vulnerability Description: A resource management error caused by improper handling of certain Internet Control Message Protocol (ICMP) IPv4 packets. Vulnerability Details - Exploitability: Remotely exploitable. - Known Exploits: No known public exploit code specifically targeting this vulnerability. - Exploit Difficulty: Low-skilled attackers can exploit this vulnerability. Mitigation Measures - Vendor Actions: Rockwell Automation has released a new firmware version, 15.2(4)EA3, to address the vulnerability. - User Actions: Users are recommended to upgrade to the latest firmware version and implement defensive measures to minimize exploitation risk, such as minimizing network exposure and using secure remote access methods. Vendor - Vendor Name: Rockwell Automation

Goal Reached Thanks to every supporter — we hit 100%!

Rockwell Stratix 5400/5410 Switch CVE-2016-1399 ICMP Resource Management Vulnerability