Rockwell Automation EtherNet/IP Web Server CVE-2018-19016 Remote Denial of Service Vulnerability

Bugtraq ID:	106856
Class:	Design Error
CVE:	CVE-2018-19016
Remote:	Yes
Local:	No
Published:	Feb 05 2019 12:00AM
Updated:	Feb 05 2019 12:00AM
Credit:	Rockwell Automation, John Lampe, Ben Smith, Cesar Navas, Stephen Junck, Dan Coppock, Dimitriy Dade, Aleks McKinney, Aaron Luft, Kyle Kelley, Stephen Baronowsky, Iain Kyte, Ron Erdman, Scott Clement and Tenable.
Vulnerable:	Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 5.001 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 4.016 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 4.014 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 4.012 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 4.011 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 4.010 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 4.006 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 4.003 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 3.006 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 2.002 Rockwall Automation EtherNet/IP Web Server Module 1756-EWEB 1.002 Rockwall Automation CompactLogix EtherNet/IP Web Server Module 1768-EWEB 2.005 Rockwall Automation CompactLogix EtherNet/IP Web Server Module 1768-EWEB 2.001 Rockwall Automation CompactLogix EtherNet/IP Web Server Module 1768-EWEB 1.002
Not Vulnerable:

Rockwell Automation EtherNet/IP Web Server CVE-2018-19016 Remote Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].