← All CVEs

CVE-2016-9343

critical · 10

An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.

10
CVSS
10.5%
EPSS (exploit prob.)
96th
EPSS percentile
2017-02-13
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

VendorProductAffected versions
rockwellautomationsoftlogix_5800_controller_firmware18.00
rockwellautomationsoftlogix_5800_controller_firmware19.00
rockwellautomationsoftlogix_5800_controller_firmware20.00
rockwellautomationsoftlogix_5800_controller_firmware21.00
rockwellautomationsoftlogix_5800_controllerall versions
rockwellautomationrslogix_emulate_5000_firmware18.00
rockwellautomationrslogix_emulate_5000_firmware19.00
rockwellautomationrslogix_emulate_5000_firmware20.00
rockwellautomationrslogix_emulate_5000_firmware21.00
rockwellautomationrslogix_emulate_5000all versions
rockwellautomationguardlogix_5570_controller_firmware16.00
rockwellautomationguardlogix_5570_controller_firmware17.00
rockwellautomationguardlogix_5570_controller_firmware18.00
rockwellautomationguardlogix_5570_controller_firmware19.00
rockwellautomationguardlogix_5570_controller_firmware20.00
rockwellautomationguardlogix_5570_controller_firmware20.010
rockwellautomationguardlogix_5570_controller_firmware20.017
rockwellautomationguardlogix_5570_controller_firmware21.00
rockwellautomationguardlogix_5570_controllerall versions
rockwellautomationflexlogix_l34_controller_firmware16.00
rockwellautomationflexlogix_l34_controllerall versions
rockwellautomationcontrollogix_l55_controller_firmware16.00
rockwellautomationcontrollogix_l55_controller_firmware16.020
rockwellautomationcontrollogix_l55_controller_firmware16.022
rockwellautomationcontrollogix_l55_controllerall versions
rockwellautomationcontrollogix_5570_redundant_controller_firmware20.00
rockwellautomationcontrollogix_5570_redundant_controller_firmware20.050
rockwellautomationcontrollogix_5570_redundant_controller_firmware20.055
rockwellautomationcontrollogix_5570_redundant_controller_firmware21.00
rockwellautomationcontrollogix_5570_redundant_controllerall versions
rockwellautomationcontrollogix_5570_controller_firmware18.00
rockwellautomationcontrollogix_5570_controller_firmware19.00
rockwellautomationcontrollogix_5570_controller_firmware20.010
rockwellautomationcontrollogix_5570_controller_firmware20.013
rockwellautomationcontrollogix_5570_controller_firmware21.00
rockwellautomationcontrollogix_5570_controllerall versions
rockwellautomationcontrollogix_5560_redundant_controller_firmware16.00
rockwellautomationcontrollogix_5560_redundant_controller_firmware19.00
rockwellautomationcontrollogix_5560_redundant_controller_firmware20.00
rockwellautomationcontrollogix_5560_redundant_controller_firmware20.050

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-9343