VulnerabilityModified
CVE-2023-1834
This could potentially allow attackers unauthorized access to the device through the open ports.
CRITICAL 9.1EPSS 1.25%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.25%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running v7.13 may have the telnet and FTP ports open by default. This could potentially allow attackers unauthorized access to the device through the open ports.
- CVSS 3.1
- 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- EPSS
- 1.25% probability · 68th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- rockwellautomation/kinetix 5500 firmware
- Source
- PSIRT@rockwellautomation.com
References
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139441Permissions Required
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-09Third Party Advisory, US Government Resource
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139441Permissions Required
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.