Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected product is restarted.

An unauthenticated, remote threat actor could send a crafted UDP packet to the affected product's SNMP service. This can be a zero length SNMP packet (to recreate use: hping3 -2 -p 161). Improper handling of this crafted packet could result in a denial of service for SNMP; port 161 stops receiving messages until the device is power-cycled. The web UI may show that the service is running even if it is not available. The control functionality of the device is unaffected.

Detections

Analytics

CVE-2018-19016

high

Tenable Plugins

high