Rockwell Automation Stratix 5900 security update

Number: AV17-067
Date: 11 May 2017

Purpose

The purpose of this advisory is to bring attention to a recently released security update for the Stratix 5900.

Assessment

Rockwell Automation has released security updates to address 41 vulnerabilities in its Stratix 5900 industrial router products. The severity of the vulnerabilities range from high to critical, and exploitation could allow an unprivileged attacker to remotely execute code and/or create denial of service conditions.

Affected software versions:

  • Stratix 5900 version 15.6.3 EA and earlier

CVE References: CVE-2016-6380, CVE-2016-6393, CVE-2016-6384, CVE-2016-6381, CVE-2016-6382,
CVE-2016-6415, CVE-2016-1409, CVE-2016-1350, CVE-2016-1344, CVE-2015-7691, CVE-2015-7692,
CVE-2015-7701, CVE-2015-7702, CVE-2015-7703, CVE-2015-7704, CVE-2015-7705, CVE-2015-7848,
CVE-2015-7849, CVE-2015-7850, CVE-2015-7851, CVE-2015-7852, CVE-2015-7853, CVE-2015-7854,
CVE-2015-7855, CVE-2015-7871, CVE-2015-1798, CVE-2015-0642, CVE-2015-0643, CVE-2015-0646,
CVE-2015-0207, CVE-2015-0209, CVE-2015-0285, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289,
CVE-2015-0290, CVE-2015-0291, CVE-2015-0292, CVE-2015-0293, CVE-2015-1787, CVE-2014-3566,
CVE-2014-3359, CVE-2014-3355, CVE-2014-3361, CVE-2014-3354, CVE-2014-3360, CVE-2014-3299,
CVE-2010-5298, CVE-2014-0076, CVE-2014-0195, CVE-2014-0198, CVE-2014-0221, CVE-2014-0224,
CVE-2014-3470, CVE-2014-2113, CVE-2014-2108, CVE-2014-2109, CVE-2014-2111, CVE-2014-2106,
CVE-2014-2112

Suggested Action

CCIRC recommends that system administrators test and deploy the vendor-released updates to affected devices per your change management policies.

References:

Date modified: