Buffer overflow in Rockwellautomation 1768 Compact Guardlogix L4xs Controller
CVE-2016-9343
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.105 (95.6th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 95.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.105 · newest: 0.105 · change: 0.000
Affected products
- Rockwellautomation 1768 Compact Guardlogix L4xs Controller
- Rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware — versions 18.00, 19.00, 20.00
- Rockwellautomation 1768 Compactlogix L4x Controller
- Rockwellautomation 1768 Compactlogix L4x Controller Firmware — versions 16.00, 16.020, 16.025
- Rockwellautomation 1769 Compactlogix 5370 L1 Controller
- Rockwellautomation 1769 Compactlogix 5370 L1 Controller Firmware — versions 20.00, 20.010, 20.013
- Rockwellautomation 1769 Compactlogix 5370 L2 Controller
- Rockwellautomation 1769 Compactlogix 5370 L2 Controller Firmware — versions 20.00, 20.010, 20.013
- Rockwellautomation 1769 Compactlogix 5370 L3 Controller
- Rockwellautomation 1769 Compactlogix 5370 L3 Controller Firmware — versions 20.00, 20.010, 20.013
Weakness classification (CWE)
References
- ics-cert.us-cert.gov/advisories/ICSA-16-343-05 (US Government Resource, Third Party Advisory)
- www.securityfocus.com/bid/95304 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2016-9343?
- CVE-2016-9343 is a critical-severity vulnerability in Rockwellautomation 1768 Compact Guardlogix L4xs Controller, classified under Out-of-bounds Write. CVSS score: 10.0/10. Published 2017-02-13.
- How severe is CVE-2016-9343?
- Critical severity. CVSS v3 base score is 10.0 out of 10.