NetSight
high7.5

CVE-2018-19016

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earl…

Impact

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected product is restarted.

Affected products

VendorProductAffected versions
RockwellautomationEthernet\/Ip Web Server Module 1756-Eweb
through 5.001
RockwellautomationEthernet\/Ip Web Server Module 1768-Eweb
through 2.005

Weakness classification

References