[Control systems] Rockwell Automation security advisory (AV23-504)

From: Canadian Centre for Cyber Security

Serial number: AV23-504
Date: August 24, 2023

On August 24, 2023, CISA published an ICS advisory to address a vulnerability in the following products:

  • 1734-AENT/1734-AENTR Series C – versions 7.011 and prior
  • 1734-AENT/1734-AENTR Series B – versions 5.019 and prior
  • 1738-AENT/ 1738-AENTR Series B – versions 6.011 and prior
  • 1794-AENTR Series A – versions 2.011 and prior
  • 1732E-16CFGM12QCWR Series A – versions 3.011 and prior
  • 1732E-12X4M12QCDR Series A – versions 3.011 and prior
  • 1732E-16CFGM12QCR Series A – versions 3.011 and prior
  • 1732E-16CFGM12P5QCR Series A – versions 3.011 and prior
  • 1732E-12X4M12P5QCDR Series A – versions 3.011 and prior
  • 1732E-16CFGM12P5QCWR Series B – versions 3.011 and prior
  • 1732E-IB16M12R Series B – versions 3.011 and prior
  • 1732E-OB16M12R Series B – versions 3.011 and prior
  • 1732E-16CFGM12R Series B – versions 3.011 and prior
  • 1732E-IB16M12DR Series B – versions 3.011 and prior
  • 1732E-OB16M12DR Series B – versions 3.011 and prior
  • 1732E-8X8M12DR Series B – versions 3.011 and prior
  • 1799ER-IQ10XOQ10 Series B – versions 3.011 and prior

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

Date modified: