Rockwell Automation ArmorBlock 5000 I/O Web Server Session Prediction Vulnerability

A vulnerability exists in the web server of the Rockwell Automation ArmorBlock 5000 I/O 5032 16pt Digital Configurable module. The issue arises because the web server's session number increments in a predictable manner, based on the last two consecutive sign-in session intervals. This predictability could potentially be exploited.

Impact

The vulnerability allows for session prediction, which could be used to intercept and misuse session credentials. According to Rockwell Automation, this could allow unauthorized users to perform privileged actions.

Remediation

Users should update to version 1.012, the corrected version. If an upgrade is not possible, security best practices should be applied.