Description
An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Rockwell Automation CompactLogix 5370 L1 controllers
Default version status: unaffected
0 to < 20 - 30affected
Rockwell Automation CompactLogix 5370 L2 controllers
Default version status: unaffected
0 to < 20 - 30affected
Rockwell Automation CompactLogix 5370 L3 controllers
Default version status: unaffected
0 to < 20 - 30affected
Rockwell Automation Compact GuardLogix 5370 controllers
Default version status: unaffected
0 to < 20 - 30affected
Rockwell Automation Armor Compact GuardLogix 5370 controllers
Default version status: unaffected
0 to < 20 - 30affected