CVE-2018-19282 - CVE House
Back to Database
Status published Critical CVE-2018-19282

Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow...

Vulnerability Description

Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Industrial Protocol (CIP) network stack. The vulnerability allows the attacker to crash the CIP in a way that it does not accept new connections, but keeps the current connections active, which can prevent legitimate users from recovering control.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-19282

Credits & Attribution

No credits recorded in the NVD database.

References

More from rockwellautomation

View All →
CVE-2018-19616
An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000....
High 8.1
CVE-2018-19615
Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker...
Medium 6.1
CVE-2017-9312
Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley...
High 7.5
CVE-2016-5814
Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix...
High 8.6
CVE-2016-5645
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA,...
Unknown 0

Affected Vendor

rockwellautomation

View all reports →

Affected Software

powerflex 525 ac drives firmware
Vulnerable Versions:
0

Timeline

Official Publish: April 4th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.