CVE-2019-10954

Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow

State
Published
Severity
Not scored
Published
May 1, 2019
Updated
Aug 4, 2024
Reserved
Apr 8, 2019

Read the record on cve.org

Description

An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-121 Stack-based Buffer Overflow

Affected Products

ProductVersions
CompactLogix 5370 L1 controllersRockwell Automation
  • before 20 - 30Affected
CompactLogix 5370 L2 controllersRockwell Automation
  • before 20 - 30Affected
CompactLogix 5370 L3 controllersRockwell Automation
  • before 20 - 30Affected
Compact GuardLogix 5370 controllersRockwell Automation
  • before 20 - 30Affected
Armor Compact GuardLogix 5370 controllersRockwell Automation
  • before 20 - 30Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.