VDB
BDU%3A2023-03570
BDU%3A2023-03570
PUBLISHED
CVSS 10 CRITICAL
Уязвимость компонента eXchange Layer (IXL) среды разработки приложений для программируемых логических контроллеров ISaGRAF Runtime Rockwell Automation, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric, Rockwell Automation Inc., Xylem Inc. | MiCOM C264, Easergy C5, PACiS GTW, EPAS GTW, SCD2200 CP-3, SCD2200 MC-31, Saitel DR, AADvance Controller, ISaGRAF6 Workbench, Micro810, Micro820, Micro830, Micro850, Micro870, MultiSmart, SCADAPack 300E RTU, SCADAPack 53xE RTU, SCADAPack Workbench, SAGE RTU - C3414 CPU, SAGE RTU - C3413 CPU, SAGE RTU - C3412 CPU, Easergy T300, Talus T4e RTU, Talus T4c RTU, ISaGRAF Runtime, Saitel DP |
Timeline
- Jul 6, 2023 CVE Published
- Oct 23, 2023 CVE Updated
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04 url
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699 url
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-280-01 url
- https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf url
- https://vuldb.com/?id.195459 url