Known vulnerabilities in Allen-Bradley Stratix 5400 Industrial Ethernet Switches

Vendor: Rockwell Automation
Software: Allen-Bradley Stratix 5400 Industrial Ethernet Switches
Software CPE: cpe:2.3:h:rockwell_automation:allen-bradley_stratix_5400_industrial_ethernet_switches:*:*:*:*:*:*:*:*
Website: https://www.rockwellautomation.com/
Total vulnerabilities: 26
Public exploits: 2
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Allen-Bradley Stratix 5400 Industrial Ethernet Switches Allen-Bradley Stratix 5400 Industrial Ethernet Switches is affected by 26 known vulnerabilities: 10 high, 8 medium, 8 low Critical High Medium Low

Vulnerabilities (26)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68873 - State Issues
CVE-2020-3200		 CWE-371 Medium
No
No
 15.2(7)E2 01.11.2022 SB2020060371
SB2022110108
#VU51780 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1443		 CWE-78 Low
No
No
 - 30.03.2021 SB2021033009
SB2021042150
#VU51768 - Insufficiently Protected Credentials
CVE-2021-1392		 CWE-522 Low
No
No
 - 29.03.2021 SB2021032917
SB2021042150
#VU51726 - Resource exhaustion
CVE-2021-1356		 CWE-400 Low
No
No
 - 25.03.2021 SB2021032513
SB2021042150
#VU51725 - Resource exhaustion
CVE-2021-1220		 CWE-400 Low
No
No
 - 25.03.2021 SB2021032513
SB2021042150
#VU51709 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1452		 CWE-78 Low
No
No
 - 24.03.2021 SB2021032418
SB2021042150
#VU51708 - Use of Out-of-range Pointer Offset
CVE-2021-1352		 CWE-823 Medium
No
No
 - 24.03.2021 SB2021032417
SB2021042150
#VU51707 - Insufficient Verification of Data Authenticity
CVE-2021-1403		 CWE-345 Medium
No
No
 - 24.03.2021 SB2021032416
SB2021042150
#VU51704 - Information Exposure Through Log Files
CVE-2021-1442		 CWE-532 Low
No
No
 - 24.03.2021 SB2021032413
SB2021042150
#VU11363 - Heap-based Buffer Overflow
CVE-2018-0172		 CWE-122 Medium
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU11362 - Improper input validation
CVE-2018-0173		 CWE-20 Medium
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU11361 - Improper input validation
CVE-2018-0174		 CWE-20 Medium
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU11356 - Missing release of memory after effective lifetime
CVE-2018-0158		 CWE-401 Medium
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041801
SB2018041802
#VU11352 - Memory corruption
CVE-2018-0175		 CWE-119 Low
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041801
SB2018041802
and 1 more
#VU11351 - Buffer overflow
CVE-2018-0167		 CWE-120 Low
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041801
SB2018041802
and 1 more
#VU11337 - Improper input validation
CVE-2018-0156		 CWE-20 Medium
No
Exploited
 - 29.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU11336 - Buffer overflow
CVE-2018-0171		 CWE-120 High
Available
Exploited
 - 28.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU7298 - Buffer overflow
CVE-2017-6744		 CWE-120 High
No
Exploited
 - 03.07.2017 SB2017070303
SB2017082503
#VU7297 - Buffer overflow
CVE-2017-6743		 CWE-120 High
No
Exploited
 - 03.07.2017 SB2017070303
SB2017082503
#VU7296 - Buffer overflow
CVE-2017-6742		 CWE-120 High
No
Exploited
 - 03.07.2017 SB2017070303
SB2017082503


Showing elements 1 - 20 out of 26