Rockwell Automation Stratix 5400/5410/5700 and ArmorStratix 5700 (ICSA-19-094-02) – Products Used in the Water and Wastewater and Energy Sectors

The NCCIC has published an advisory on an uncontrolled resource consumption vulnerability in Rockwell Automation Stratix 5400/5410/5700 and ArmorStratix 5700. Numerous products and versions of those products are affected. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to cause a memory leak on an affected device, which may cause the device to reload. Rockwell Automation recommends users upgrade to FRN 15.2(6)E2a or later and to apply a series of general guidelines. The NCCIC has also provided a series of measures for mitigating the vulnerabilities. Read the advisory at NCCIC/ICS-CERT.