SB2023102538 - Improper Privilege Management in Rockwell Automation Stratix 5800 and Stratix 5200 running Cisco IOS XE

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper Privilege Management (CVE-ID: CVE-2023-20198)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to improper privilege management in the web UI feature. A remote non-authenticated attacker can send a specially crafted HTTP request to the affected device and create an account with privilege level 15 access.

Note, the vulnerability is being actively exploited in the wild.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-297-01"
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-297-01</a></p><p>
• https://www.rockwellautomation.com/en-in/support/advisory.PN1653.html</p><p><br></p>