Known vulnerabilities in Stratix 5800

Vendor: Rockwell Automation
Software: Stratix 5800
Software CPE: cpe:2.3:h:rockwell_automation:stratix_5800:*:*:*:*:*:*:*:*
Website: https://www.rockwellautomation.com/
Total vulnerabilities: 17
Public exploits: 1
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Stratix 5800 Stratix 5800 is affected by 17 known vulnerabilities: 1 critical, 5 medium, 11 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82065 - Improper Privilege Management
CVE-2023-20198		 CWE-269 Critical
Available
Exploited
 - 17.10.2023 SB2023101701
SB2023102538
#VU68872 - Improper Verification of Cryptographic Signature
CVE-2020-3209		 CWE-347 Low
No
No
 16.12.01 01.11.2022 SB2020060370
SB2022110109
#VU51780 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1443		 CWE-78 Low
No
No
 17.04.01 30.03.2021 SB2021033009
SB2021042150
#VU51769 - Improper Check for Unusual or Exceptional Conditions
CVE-2021-1446		 CWE-754 Medium
No
No
 16.12.01 29.03.2021 SB2021032918
SB2022110109
#VU51768 - Insufficiently Protected Credentials
CVE-2021-1392		 CWE-522 Low
No
No
 17.04.01 29.03.2021 SB2021032917
SB2021042150
#VU51731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-1385		 CWE-22 Low
No
No
 16.12.01 25.03.2021 SB2021032517
SB2022110109
#VU51726 - Resource exhaustion
CVE-2021-1356		 CWE-400 Low
No
No
 17.04.01 25.03.2021 SB2021032513
SB2021042150
#VU51725 - Resource exhaustion
CVE-2021-1220		 CWE-400 Low
No
No
 17.04.01 25.03.2021 SB2021032513
SB2021042150
#VU51709 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1452		 CWE-78 Low
No
No
 17.04.01 24.03.2021 SB2021032418
SB2021042150
#VU51708 - Use of Out-of-range Pointer Offset
CVE-2021-1352		 CWE-823 Medium
No
No
 17.04.01 24.03.2021 SB2021032417
SB2021042150
#VU51707 - Insufficient Verification of Data Authenticity
CVE-2021-1403		 CWE-345 Medium
No
No
 17.04.01 24.03.2021 SB2021032416
SB2021042150
#VU51704 - Information Exposure Through Log Files
CVE-2021-1442		 CWE-532 Low
No
No
 17.04.01 24.03.2021 SB2021032413
SB2021042150
#VU47214 - Improper input validation
CVE-2020-3516		 CWE-20 Low
No
No
 16.12.01 24.09.2020 SB2020093096
SB2022110109
#VU28762 - Improper input validation
CVE-2020-3218		 CWE-20 Low
No
No
 16.12.01 05.06.2020 SB2020060514
SB2022110109
#VU28760 - Command injection
CVE-2020-3219		 CWE-77 Medium
No
No
 16.12.01 05.06.2020 SB2020060513
SB2022110109
#VU28568 - Command injection
CVE-2020-3211		 CWE-77 Low
No
No
 16.12.01 04.06.2020 SB2020060419
SB2022110109
#VU28565 - Permissions, Privileges, and Access Controls
CVE-2020-3229		 CWE-264 Medium
No
No
 16.12.01 04.06.2020 SB2020060420
SB2022110109