CVE-2018-19016CWE-20

CVE-2018-19016: vulnerability in Rockwell Automation EtherNet/IP Web Server…

Published · Updated

Follow this CVE+ Monitor Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier.

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.2%
Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected product is restarted.
Affected products
Rockwell · Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier.