An unauthenticated remote attacker may exploit an uncontrolled resource consumption vulnerability in the IEC 61131 program of the affected products. By generating large amounts of network traffic, the attacker can cause a Denial-of-Service condition on the device. This vulnerability poses a significant risk to the availability of the affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2018-25112 |
Exploitation
To exploit this vulnerability, an attacker can send a large volume of network traffic to the affected device, overwhelming its resources. This can lead to a Denial-of-Service condition, rendering the device unresponsive to legitimate requests.
Affected Products
- IEC 61131 compliant devices: These devices may experience resource exhaustion due to excessive network traffic.
Mitigation
To mitigate this vulnerability, it is recommended to implement network traffic filtering and rate limiting to prevent excessive traffic from reaching the affected devices. Additionally, keeping the firmware updated and monitoring network activity can help in identifying and responding to potential attacks.