Rockwellautomation Compactlogix_5370_l1
5 CVEs affecting Rockwellautomation Compactlogix_5370_l1. Latest disclosed: 2022-07-27. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1161 | Critical | 10.0 | 2022-04-11 | An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5… |
CVE-2019-10952 | Critical | 9.8 | 2019-05-01 | An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer ov… |
CVE-2019-10954 | High | 7.5 | 2019-05-01 | An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in… |
CVE-2019-10955 | Medium | 6.1 | 2019-04-25 | In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, Compac… |
CVE-2020-6998 | Medium | 5.8 | 2022-07-27 | The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage… |