CVE-2016-9343
highpriority · track · 44EPSS 0.105 · 96 %ileEUUSgrimoire priorityP1 · Urgent
Exploitable?
—
no known exploitation
Likely / severe?
10.5% (96th) EPSS
CVSS 7.5 · high
Who says so?
3 sources
cnnvd · enisa_euvd · nvd
EPSS · scored 2026-10-27
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.
01
cvss
Technical severity, 0–10. One row per scoring source.
10.0
010
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–10
v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 6
02
weaknesses
The CWE weakness classes this flaw belongs to.
03
affected products (86)
Products and version ranges known to be affected.
- n/a Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00≤ Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00enisa_euvdEU
- rockwellautomation 1768 compact guardlogix l4xs controller firmware= 18.00nvdUScpe:2.3:o:rockwellautomation:1768_compact_guardlogix_l4xs_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compact guardlogix l4xs controller firmware= 19.00nvdUScpe:2.3:o:rockwellautomation:1768_compact_guardlogix_l4xs_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compact guardlogix l4xs controller firmware= 20.00nvdUScpe:2.3:o:rockwellautomation:1768_compact_guardlogix_l4xs_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compact guardlogix l4xs controller firmware= 20.011nvdUScpe:2.3:o:rockwellautomation:1768_compact_guardlogix_l4xs_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compact guardlogix l4xs controller firmware= 20.013nvdUScpe:2.3:o:rockwellautomation:1768_compact_guardlogix_l4xs_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compactlogix l4x controller firmware= 16.00nvdUScpe:2.3:o:rockwellautomation:1768_compactlogix_l4x_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compactlogix l4x controller firmware= 16.020nvdUScpe:2.3:o:rockwellautomation:1768_compactlogix_l4x_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compactlogix l4x controller firmware= 16.025nvdUScpe:2.3:o:rockwellautomation:1768_compactlogix_l4x_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compactlogix l4x controller firmware= 17.00nvdUScpe:2.3:o:rockwellautomation:1768_compactlogix_l4x_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compactlogix l4x controller firmware= 18.00nvdUScpe:2.3:o:rockwellautomation:1768_compactlogix_l4x_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compactlogix l4x controller firmware= 19.00nvdUScpe:2.3:o:rockwellautomation:1768_compactlogix_l4x_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compactlogix l4x controller firmware= 20.00nvdUScpe:2.3:o:rockwellautomation:1768_compactlogix_l4x_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compactlogix l4x controller firmware= 20.011nvdUScpe:2.3:o:rockwellautomation:1768_compactlogix_l4x_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1768 compactlogix l4x controller firmware= 20.016nvdUScpe:2.3:o:rockwellautomation:1768_compactlogix_l4x_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1769 compactlogix 5370 l1 controller firmware= 20.00nvdUScpe:2.3:o:rockwellautomation:1769_compactlogix_5370_l1_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1769 compactlogix 5370 l1 controller firmware= 20.010nvdUScpe:2.3:o:rockwellautomation:1769_compactlogix_5370_l1_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1769 compactlogix 5370 l1 controller firmware= 20.013nvdUScpe:2.3:o:rockwellautomation:1769_compactlogix_5370_l1_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1769 compactlogix 5370 l1 controller firmware= 21.00nvdUScpe:2.3:o:rockwellautomation:1769_compactlogix_5370_l1_controller_firmware:*:*:*:*:*:*:*:*
- rockwellautomation 1769 compactlogix 5370 l2 controller firmware= 20.00nvdUScpe:2.3:o:rockwellautomation:1769_compactlogix_5370_l2_controller_firmware:*:*:*:*:*:*:*:*
showing 20 of 86
04
also known as (3)
Other names and identifiers for this entity.
05
sources
Which sources assert this record, and when.
07
references (7)
External citations — patches, advisories, analysis.
- http://www.rockwellautomation.com/Patchcnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-343-05cnnvd
- https://www.securityfocus.com/bid/95304cnnvd
- http://www.securityfocus.com/bid/95304enisa_euvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-343-05enisa_euvd
- http://www.securityfocus.com/bid/95304Third Party AdvisoryVDB Entrynvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-343-05Third Party AdvisoryUS Government Resourcenvd
scry
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan