https://ics-cert.us-cert.gov/advisories/ICSA-19-036-02

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected product is restarted.  

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information.

An unauthenticated, remote threat actor could send a crafted UDP packet to the affected product's SNMP service. This can be a zero length SNMP packet (to recreate use: hping3 -2 -p 161). Improper handling of this crafted packet could result in a denial of service for SNMP; port 161 stops receiving messages until the device is power-cycled. The web UI may show that the service is running even if it is not available. The control functionality of the device is unaffected.

ID	Name	Product	Family	Severity
500157	Rockwell (CVE-2018-19016)	Tenable.ot	Tenable.ot	high
720156	Rockwell Automation 1756-EWEB <= 5.001 and 1768-EWEB <= 2.005 SNMP Denial of Service	Nessus Network Monitor	SCADA	high

CVE-2018-19016

high

Tenable Plugins

high

high