critical10.0
CVE-2016-9343
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to F…
Impact
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Softlogix 5800 Controller Firmware | Versions 18.00, 19.00, 20.00, 21.00 |
| Rockwellautomation | Rslogix Emulate 5000 Firmware | Versions 18.00, 19.00, 20.00, 21.00 |
| Rockwellautomation | Guardlogix 5570 Controller Firmware | Versions 16.00, 17.00, 18.00, 19.00, 20.00, 20.010 |
| Rockwellautomation | Flexlogix L34 Controller Firmware | Version 16.00 |
| Rockwellautomation | Controllogix L55 Controller Firmware | Versions 16.00, 16.020, 16.022 |
| Rockwellautomation | Controllogix 5570 Redundant Controller Firmware | Versions 20.00, 20.050, 20.055, 21.00 |
| Rockwellautomation | Controllogix 5570 Controller Firmware | Versions 18.00, 19.00, 20.010, 20.013, 21.00 |
| Rockwellautomation | Controllogix 5560 Redundant Controller Firmware | Versions 16.00, 19.00, 20.00, 20.050, 20.055 |
| Rockwellautomation | Controllogix 5560 Controller Firmware | Versions 16.00, 16.020, 16.022, 17.00, 18.00, 19.00 |
| Rockwellautomation | 1769 Compactlogix L3x Controller Firmware | Versions 16.00, 16.020, 16.023, 17.00, 18.00, 19.00 |
| Rockwellautomation | 1769 Compactlogix L23x Controller Firmware | Versions 16.00, 17.00, 18.00, 19.00, 20.00, 20.010 |
| Rockwellautomation | 1769 Compactlogix 5370 L3 Controller Firmware | Versions 20.00, 20.010, 20.013, 21.00 |