CVE-2018-18981
published 2019-01-24CVE-2018-18981: In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to service ports…
PriorityP342high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
3.87%
88.9th percentile
In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory consumption that could lead to a partial or complete denial-of-service condition to the affected services.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| rockwell | rockwell_automation_factorytalk_services_platform_v2.90_and_earlier | — | — |
| rockwellautomation | factorytalk_services_platform | <= 2.90 | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Rockwell Automation FactoryTalk Services Platform
cisa_ics·2018-12-20·CVSS 7.5
[HIGH] Rockwell Automation FactoryTalk Services Platform
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Rockwell Automation FactoryTalk Services Platform
Last RevisedDecember 20, 2018
Alert CodeICSA-18-331-02
## 1. EXECUTIVE SUMMARY
-
CVSS v3 7.5
- ATTENTION: Exploitable remotely/low skill level to exploit
- Vendor: Rockwell Automation
- Equipment: FactoryTalk Services Platform
- Vulnerability: Heap-based Buffer Overflow
## 2. REPOSTED INFORMATION
This advisory was originally posted to the HSIN ICS-CERT library on November 27, 2018, and is being released to the NCCIC/ICS-CERT website.
## 3. RISK EVALUATION
Successful exploitation of this vulnerability could allow a remote
GHSA
GHSA-v3wg-5frm-q7hg: In Rockwell Automation FactoryTalk Services Platform 2
ghsa_unreviewed·2022-05-13
CVE-2018-18981 [HIGH] CWE-787 GHSA-v3wg-5frm-q7hg: In Rockwell Automation FactoryTalk Services Platform 2
In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory consumption that could lead to a partial or complete denial-of-service condition to the affected services.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-01-24
Published