PowerFlex»¥»»±äƵÆ÷»Ø¾ø·þÎñ·ì϶°²È«¹«¸æ

°ä²¼¹¦·ò 2019-04-02

·ì϶±àºÅºÍ¼¶±ð


CVE±àºÅ£ºCVE-2018-19282 £¬Î£ÏÕ¼¶±ð£º¸ßΣ£¬CVSS·ÖÖµ£º³§ÉÌ×ÔÆÀ£º7.5£¬¹Ù·½Î´ÆÀ¶¨


Ó°ÏìÁìÓò


ÊÜÓ°ÏìÈí¼þÒÔ¼°°æ±¾£º 

Rockwell Automation PowerFlex 525£¨´øÓÐEtherNet/IPºÍSafety£©5.001¼°Ö®Ç°°æ±¾


·ì϶¸ÅÊö


Rockwell Automation PowerFlex 525ÊÇÃÀ¹úÂÞ¿ËΤ¶û£¨Rockwell Automation£©¹«Ë¾µÄÒ»¿î¿Éµ÷»¥»»±äƵÆ÷¡£

Rockwell Automation PowerFlex 525£¨´øÓÐEtherNet/IPºÍSafety£©5.001¼°Ö®Ç°°æ±¾ÖдæÔÚ°²È«·ì϶¡£Ô¶³Ì¹¥»÷ÕßÄܹ»Í¨¹ý·¢ËÍÌØÔìµÄUDPÊý¾Ý°üÀ´ÇÖÈÅÓëÉ豸ÓйصÄÅäÖúͽÚÔìÈí¼þ£¬´Ó¶øµ¼ÖÂͨÓù¤ÒµºÍ̸£¨CIP£©ÍøÂç²Ö¿â±ÀÀ££¬Ôì³É»Ø¾ø·þÎñ£¨×ÊÔ´ºÄ¾¡£©¡£ 


½¨¸´½¨Òé


ÂÞ¿ËΤ¶û×Ô¶¯»¯ÒѰ䲼й̼þÒÔ½â¾ö´Ë·ì϶¡£´ÓÒÔϵØÎ»ÏÂÔØ×îа汾µÄ¹Ì¼þ£ºhttps://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?Keyword=25B&crumb=11¡£


²Î¿¼Á´½Ó


https://www.securityweek.com/critical-flaw-allows-hackers-take-control-powerflex-ac-drives
https://ics-cert.us-cert.gov/advisories/ICSA-19-087-01