Rockwell Automation products using GoAhead Web Server

Risk Summary

Successful exploitation of these vulnerabilities could have a high impact on the confidentiality, integrity, and availability of the vulnerable devices.

CVEs (2)

Remediations

• 1769-AENTR: Update to 1.003 or later
• 5069-AEN2TR (discontinued): Migrate to the 5069-AENTR.
• 1756-EN2T/D: Update to 11.002 or later
• 1756-EN2TR/C: Update to 11.002 or later
• 1756-EN2F/C: Update to 11.002 or later
• 1756-EN2TP/A: Update to 11.002 or later
• 1756-HIST1G/A (discontinued): Update to series B v5.104 or C 7.100 or later
• 1756-HIST2G/A (discontinued): Update to series B v5.104 or C 7.100 or later
• 1756-HIST2G/B: Update to 5.104 or later
• ControlLogix 5580 controllers: Update to V32.016 or later
• GuardLogix 5580 controllers: Update to V32.016 or later
• CompactLogix 5380 controllers: Update to V32.016 or later
• Compact GuardLogix 5380 controllers: Update to V32.016 or later
• CompactLogix 5480: Update to V32.016 or later
• Disable the web server if possible. Review the corresponding product user manual for instructions, which can be found in the Rockwell Automation literature library.
• For 1732E, upgrade to the latest firmware to disable the web server.
• Configure firewalls to disallow network communication through HTTP/Port 80.
• See the Rockwell Automation Knowledgebase article, Security Best Practices, for more recommendations to maintain security posture of an environment
• Users should see the Rockwell Automation security advisory for more information.

Affected Vendors

Affected Products (28)

Affected Sectors

Multiple Sectors