CVEvulnerability

CVE-2016-9343

10.0 CRITICAL Published 2017-02-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-02-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-787

Description

An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.

Affected configurations

• rockwellautomation softlogix 5800 controller firmware 18.00 • rockwellautomation softlogix 5800 controller firmware 19.00 • rockwellautomation softlogix 5800 controller firmware 20.00 • rockwellautomation softlogix 5800 controller firmware 21.00 • rockwellautomation rslogix emulate 5000 firmware 18.00 • rockwellautomation rslogix emulate 5000 firmware 19.00 • rockwellautomation rslogix emulate 5000 firmware 20.00 • rockwellautomation rslogix emulate 5000 firmware 21.00 • rockwellautomation guardlogix 5570 controller firmware 16.00 • rockwellautomation guardlogix 5570 controller firmware 17.00 • rockwellautomation guardlogix 5570 controller firmware 18.00 • rockwellautomation guardlogix 5570 controller firmware 19.00 • rockwellautomation guardlogix 5570 controller firmware 20.00 • rockwellautomation guardlogix 5570 controller firmware 20.010 • rockwellautomation guardlogix 5570 controller firmware 20.017 • rockwellautomation guardlogix 5570 controller firmware 21.00 • rockwellautomation flexlogix l34 controller firmware 16.00 • rockwellautomation controllogix l55 controller firmware 16.00 • rockwellautomation controllogix l55 controller firmware 16.020 • rockwellautomation controllogix l55 controller firmware 16.022 • rockwellautomation controllogix 5570 redundant controller firmware 20.00 • rockwellautomation controllogix 5570 redundant controller firmware 20.050 • rockwellautomation controllogix 5570 redundant controller firmware 20.055 • rockwellautomation controllogix 5570 redundant controller firmware 21.00 • rockwellautomation controllogix 5570 controller firmware 18.00 • rockwellautomation controllogix 5570 controller firmware 19.00 • rockwellautomation controllogix 5570 controller firmware 20.010 • rockwellautomation controllogix 5570 controller firmware 20.013 • rockwellautomation controllogix 5570 controller firmware 21.00 • rockwellautomation controllogix 5560 redundant controller firmware 16.00 • rockwellautomation controllogix 5560 redundant controller firmware 19.00 • rockwellautomation controllogix 5560 redundant controller firmware 20.00 • rockwellautomation controllogix 5560 redundant controller firmware 20.050 • rockwellautomation controllogix 5560 redundant controller firmware 20.055 • rockwellautomation controllogix 5560 controller firmware 16.00 • rockwellautomation controllogix 5560 controller firmware 16.020 • rockwellautomation controllogix 5560 controller firmware 16.022 • rockwellautomation controllogix 5560 controller firmware 17.00 • rockwellautomation controllogix 5560 controller firmware 18.00 • rockwellautomation controllogix 5560 controller firmware 19.00 • rockwellautomation controllogix 5560 controller firmware 20.00 • rockwellautomation controllogix 5560 controller firmware 20.010 • rockwellautomation controllogix 5560 controller firmware 20.013 • rockwellautomation 1769 compactlogix l3x controller firmware 16.00 • rockwellautomation 1769 compactlogix l3x controller firmware 16.020 • rockwellautomation 1769 compactlogix l3x controller firmware 16.023 • rockwellautomation 1769 compactlogix l3x controller firmware 17.00 • rockwellautomation 1769 compactlogix l3x controller firmware 18.00 • rockwellautomation 1769 compactlogix l3x controller firmware 19.00 • rockwellautomation 1769 compactlogix l3x controller firmware 20.00 • rockwellautomation 1769 compactlogix l3x controller firmware 20.010 • rockwellautomation 1769 compactlogix l3x controller firmware 20.013 • rockwellautomation 1769 compactlogix l23x controller firmware 16.00 • rockwellautomation 1769 compactlogix l23x controller firmware 17.00 • rockwellautomation 1769 compactlogix l23x controller firmware 18.00 • rockwellautomation 1769 compactlogix l23x controller firmware 19.00 • rockwellautomation 1769 compactlogix l23x controller firmware 20.00 • rockwellautomation 1769 compactlogix l23x controller firmware 20.010 • rockwellautomation 1769 compactlogix l23x controller firmware 20.013 • rockwellautomation 1769 compactlogix 5370 l3 controller firmware 20.00 … and 25 more

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References