Rockwell Automation LP30/40/50 and BM40 Operator Interface

Risk Summary

Successful exploitation of these vulnerabilities could allow an authenticated attacker to use specifically crafted communication requests to perform a denial-of-service condition, memory overwriting, or remote code execution.

CVEs (15)

Remediations

• Rockwell Automation recommends users with the affected software apply the following risk mitigations, if possible:
• Upgrade to CODESYS version 3.5.19.2 which has been released to mitigate these issues.
• Additionally, we encourage the customer to implement our suggested security best practices to minimize risk of the vulnerability.
• Customers can use Stakeholder-Specific Vulnerability Categorization to generate more environment-specific prioritization.
• Additional information can be found in the CODESYS Advisory.

Affected Vendors

Affected Products (4)

Affected Sectors

Critical Manufacturing