CVE-2023-1834 - CVE House
Back to Database
Status published Critical CVE-2023-1834

Rockwell Automation Kinetix 5500 Vulnerable to Open Port Exploitation

Vulnerability Description

Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running v7.13 may have the telnet and FTP ports open by default.  This could potentially allow attackers unauthorized access to the device through the open ports.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-1834

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Rockwell Automation

View all reports →

Affected Software

Kinetix 5500 EtherNet/IP Servo Drive
Vulnerable Versions:
7.13

Timeline

Official Publish: May 11th, 2023
Last Modified: January 24th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Weaknesses (CWE)