An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HRockwellautomation Armor Compact Guardlogix 5370
HWRockwellautomationall versionsRockwellautomation Armor Compact Guardlogix 5370 Firmware
OSRockwellautomation20.011 – 30.014Rockwellautomation Compactlogix 5370 L1
HWRockwellautomationall versionsRockwellautomation Compactlogix 5370 L1 Firmware
OSRockwellautomation20.011 – 30.014Rockwellautomation Compactlogix 5370 L2
HWRockwellautomationall versionsRockwellautomation Compactlogix 5370 L2 Firmware
OSRockwellautomation20.011 – 30.014Rockwellautomation Compactlogix 5370 L3
HWRockwellautomationall versionsRockwellautomation Compactlogix 5370 L3 Firmware
OSRockwellautomation20.011 – 30.014
Related vulnerabilities
Rozbieżność kodu wykonywalnego i czytelnego w sterownikach Rockwell Automation Logix
An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters...
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 ve...
In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, Micro...
Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15