APP: Rockwell Automation RSLinx Ethernet IP SendUnitData Denial of Service
This signature detects attempts to exploit a known vulnerability against Rockwell Automation. A successful attack can result in a denial-of-service condition.
Extended Description
A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.
Affected Products
Rockwellautomation rslinx
References
CVE: CVE-2020-13573
Short Name
APP:MISC:RWAUTO-ENIP-SUD-DOS
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
Automation CVE-2020-13573 Denial Ethernet IP RSLinx Rockwell SendUnitData Service of
Release Date
02/16/2021
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
srx-branch-12.3
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx-12.3
vmx-19.3
srx-12.3
Sigpack Version
3356
False Positive
Unknown
Vendors
Rockwellautomation
CVSS Score
5.0