ICSA-19-120-01_Rockwell Automation CompactLogix 5370
Younes Dragoni of Nozomi Networks reported CVE-2019-10952 to NCCIC. George Lashenko of CyberX reported CVE-2019-10954 to NCCIC.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10952US | critical9.8 | — | ||
An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability.… | ||||
| CVE-2019-10954US | high7.5 | — | ||
An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1,… | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- MitigationArmor Compact GuardLogix 5370 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
- MitigationArmor Compact GuardLogix 5370 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
- MitigationCompact GuardLogix 5370 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
- MitigationCompact GuardLogix 5370 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
- MitigationCompactLogix 5370 L1 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
- MitigationCompactLogix 5370 L1 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
- MitigationCompactLogix 5370 L2 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
- MitigationCompactLogix 5370 L2 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
- MitigationCompactLogix 5370 L3 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
- MitigationCompactLogix 5370 L3 controllers
Consult the product documentation for specific features, such as a hardware key-switch setting, which may be used to block unauthorized changes, etc.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan