The RSLinx Classic running on the remote host is affected by a remote code execution vulnerability due to a stack buffer overflow condition when handling an EtherNet/IP message received on TCP port 44818. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to execute arbitrary code.

Note that RSLinx Classic is reportedly affected by additional vulnerabilities; however, this plugin has not tested for these.

The remote host has a version of RSLinx Classic installed that is v4.00.01 or prior. It is, therefore, affected by multiple vulnerabilities.

リモートホストに、v4.00.01以前のRSLinx Classicのバージョンがインストールされています。したがって、複数の脆弱性による影響を受けます。

リモートホストで実行されているRSLinx Classicは、TCPポート44818で受信されたEtherNet/IPメッセージの処理時にスタックバッファオーバーフロー状態となるため、リモートでコードが実行される脆弱性の影響を受けます。認証されていないリモートの攻撃者がこの問題を悪用し、特別に細工されたメッセージを介して任意のコードを実行する可能性があります。

注意：RSLinx Classicはその他の脆弱性の影響も受けることが報告されていますが、このプラグインはこれらに対してのテストは行っていません。

远程主机安装的 RSLinx Classic 版本为 v4.00.01 或更低的版本。因而会受到多个漏洞的影响。

遠端主機上安裝的 RSLinx Classic 版本為 4.00.01 或更舊版本。因此，會受到多個弱點影響。

在遠端主機上執行的 RSLinx Classic 在處理 TCP 通訊埠 44818 上接收的 EtherNet/IP 訊息時，因為發生堆疊緩衝區溢位情形而受到遠端程式碼執行弱點影響。未經過驗證的遠端攻擊者可惡意利用此問題，透過特製的訊息來執行任意程式碼。

請注意，據報 RSLinx Classic 還受到其他弱點影響，但此外掛程式尚未針對這些弱點進行測試。

在远程主机上运行的 RSLinx Classic 在处理 TCP 端口 44818 上的 EtherNet/IP 消息时，因为发生堆栈缓冲区溢出情况而受到远程代码执行漏洞影响。未经身份验证的远程攻击者可利用此问题，通过特制的消息，执行任意代码。

请注意，据报告 RSLinx Classic 还受到其他漏洞的影响，但是此插件尚未对此进行测试。

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.

A stack-based buffer oveflow vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code (CVE-2018-14829).
 - A heap-based buffer overflow vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to Port 44818, causing the RSLinx Classic application to terminate. The user will need to manually restart the software to regain functionality. (CVE-2018-14821)
 - A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionality. (CVE-2018-14827)

ID	Name	Product	Family	Published	Updated	Severity
119265	Rockwell Automation RSLinx Classic ENGINE.dll Stack Buffer Overflow	Nessus	SCADA	11/28/2018	5/20/2024	critical
117671	Rockwell Automation RSLinx Classic <= 4.00.01 Multiple Vulnerabilities	Nessus	SCADA	9/24/2018	6/24/2024	critical
117671	Rockwell Automation RSLinx Classic<=4.00.01の複数の脆弱性	Nessus	SCADA	9/24/2018	6/24/2024	critical
119265	Rockwell Automation RSLinx Classic ENGINE.dllのスタックバッファオーバーフロー	Nessus	SCADA	11/28/2018	5/20/2024	critical
117671	Rockwell Automation RSLinx Classic <= 4.00.01 多个漏洞	Nessus	SCADA	9/24/2018	6/24/2024	critical
117671	Rockwell Automation RSLinx Classic <= 4.00.01 多個弱點	Nessus	SCADA	9/24/2018	6/24/2024	critical
119265	Rockwell Automation RSLinx Classic ENGINE.dll 堆疊緩衝區溢位	Nessus	SCADA	11/28/2018	5/20/2024	critical
119265	Rockwell Automation RSLinx Classic ENGINE.dll 堆栈缓冲区溢出	Nessus	SCADA	11/28/2018	5/20/2024	critical
720184	Rockwell Automation RSLinx Classic <= 4.00.01 Malformed CIP Packet Triggered Buffer Overflow (deprecated)	Nessus Network Monitor	SCADA			critical
720266	Rockwell Automation RSLinx Classic <= 4.00.01 Multiple Vulnerabilities (ICSA-18-263-02)	Nessus Network Monitor	SCADA	7/15/2019	9/30/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical