Number: AV17-067
Date: 11 May 2017
Purpose
The purpose of this advisory is to bring attention to a recently released security update for the Stratix 5900.
Assessment
Rockwell Automation has released security updates to address 41 vulnerabilities in its Stratix 5900 industrial router products. The severity of the vulnerabilities range from high to critical, and exploitation could allow an unprivileged attacker to remotely execute code and/or create denial of service conditions.
Affected software versions:
- Stratix 5900 version 15.6.3 EA and earlier
CVE References: CVE-2016-6380, CVE-2016-6393, CVE-2016-6384, CVE-2016-6381, CVE-2016-6382,
CVE-2016-6415, CVE-2016-1409, CVE-2016-1350, CVE-2016-1344, CVE-2015-7691, CVE-2015-7692,
CVE-2015-7701, CVE-2015-7702, CVE-2015-7703, CVE-2015-7704, CVE-2015-7705, CVE-2015-7848,
CVE-2015-7849, CVE-2015-7850, CVE-2015-7851, CVE-2015-7852, CVE-2015-7853, CVE-2015-7854,
CVE-2015-7855, CVE-2015-7871, CVE-2015-1798, CVE-2015-0642, CVE-2015-0643, CVE-2015-0646,
CVE-2015-0207, CVE-2015-0209, CVE-2015-0285, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289,
CVE-2015-0290, CVE-2015-0291, CVE-2015-0292, CVE-2015-0293, CVE-2015-1787, CVE-2014-3566,
CVE-2014-3359, CVE-2014-3355, CVE-2014-3361, CVE-2014-3354, CVE-2014-3360, CVE-2014-3299,
CVE-2010-5298, CVE-2014-0076, CVE-2014-0195, CVE-2014-0198, CVE-2014-0221, CVE-2014-0224,
CVE-2014-3470, CVE-2014-2113, CVE-2014-2108, CVE-2014-2109, CVE-2014-2111, CVE-2014-2106,
CVE-2014-2112
Suggested Action
CCIRC recommends that system administrators test and deploy the vendor-released updates to affected devices per your change management policies.
References: