Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-10954

Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow

Description

An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation CompactLogix 5370 L1 controllers

Default version status: unaffected

  • 0 to < 20 - 30affected

Rockwell Automation CompactLogix 5370 L2 controllers

Default version status: unaffected

  • 0 to < 20 - 30affected

Rockwell Automation CompactLogix 5370 L3 controllers

Default version status: unaffected

  • 0 to < 20 - 30affected

Rockwell Automation Compact GuardLogix 5370 controllers

Default version status: unaffected

  • 0 to < 20 - 30affected

Rockwell Automation Armor Compact GuardLogix 5370 controllers

Default version status: unaffected

  • 0 to < 20 - 30affected

References