9.8
CVSSv3

CVE-2019-10952

Published: 01/05/2019 Updated: 20/06/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and previous versions.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

rockwellautomation compactlogix_5370_l1_firmware

rockwellautomation compactlogix_5370_l2_firmware

rockwellautomation compactlogix_5370_l3_firmware

rockwellautomation armor_compact_guardlogix_5370_firmware