Risk Summary
Successful exploitation of these vulnerabilities could allow a malicious user to view and modify sensitive data or make the web page unavailable.
CVEs (10)
Remediations
- Rockwell Automation recommends users take the following measures to mitigate the risk of these vulnerabilities:
- Disable the webserver during normal use. The webserver is disabled by default and should only be enabled to modify configurations. After modifying configurations, the web server should be disabled.
- For information on how to mitigate security risks on industrial automation control systems (IACS) networks see the following publications:
- System Security Design Guidelines Reference Manual publication, SECURE-RM001
- Configure System Security Features User Manual, SECURE-UM001
- Additionally, Rockwell Automation encourages customers to implement their suggested Security Best Practices to minimize the risk of the vulnerabilities.
Affected Vendors
Rockwell Automation
Affected Products (3)
Rockwell Automation
·
ArmorStart ST281E
>= 2.004.06
Rockwell Automation
·
ArmorStart ST284E
vers:all/*
Rockwell Automation
·
ArmorStart ST280E
vers:all/*
Affected Sectors
Critical Manufacturer
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more