Rockwell Automation Compact Guardlogix 5370 Controllers
5 CVEs affecting Rockwell Automation Compact Guardlogix 5370 Controllers. Latest disclosed: 2022-07-27. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1161 | Critical | 10.0 | 2022-04-11 | An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5… |
CVE-2019-10952 | Critical | 9.8 | 2019-05-01 | An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer ov… |
CVE-2019-10954 | High | 7.5 | 2019-05-01 | An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in… |
CVE-2022-1797 | Medium | 6.8 | 2022-06-02 | A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controller… |
CVE-2020-6998 | Medium | 5.8 | 2022-07-27 | The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage… |