CVE-2018-14821

State: Published
Severity: Not scored
Published: Sep 20, 2018
Updated: Sep 17, 2024
Reserved: Aug 1, 2018

Description

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to Port 44818, causing the RSLinx Classic application to terminate. The user will need to manually restart the software to regain functionality.

Scores

The record has no CVSS score.

Weaknesses

CWE-122 HEAP-BASED BUFFER OVERFLOW CWE-122

Affected Products

Product	Versions
RSLinx ClassicRockwell Automation	4.00.01 and priorAffected

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02
https://www.tenable.com/security/research/tra-2018-26

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.