CVEvulnerability
CVE-2016-9343
10.0 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-02-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.
Affected configurations
• rockwellautomation softlogix 5800 controller firmware 18.00
• rockwellautomation softlogix 5800 controller firmware 19.00
• rockwellautomation softlogix 5800 controller firmware 20.00
• rockwellautomation softlogix 5800 controller firmware 21.00
• rockwellautomation rslogix emulate 5000 firmware 18.00
• rockwellautomation rslogix emulate 5000 firmware 19.00
• rockwellautomation rslogix emulate 5000 firmware 20.00
• rockwellautomation rslogix emulate 5000 firmware 21.00
• rockwellautomation guardlogix 5570 controller firmware 16.00
• rockwellautomation guardlogix 5570 controller firmware 17.00
• rockwellautomation guardlogix 5570 controller firmware 18.00
• rockwellautomation guardlogix 5570 controller firmware 19.00
• rockwellautomation guardlogix 5570 controller firmware 20.00
• rockwellautomation guardlogix 5570 controller firmware 20.010
• rockwellautomation guardlogix 5570 controller firmware 20.017
• rockwellautomation guardlogix 5570 controller firmware 21.00
• rockwellautomation flexlogix l34 controller firmware 16.00
• rockwellautomation controllogix l55 controller firmware 16.00
• rockwellautomation controllogix l55 controller firmware 16.020
• rockwellautomation controllogix l55 controller firmware 16.022
• rockwellautomation controllogix 5570 redundant controller firmware 20.00
• rockwellautomation controllogix 5570 redundant controller firmware 20.050
• rockwellautomation controllogix 5570 redundant controller firmware 20.055
• rockwellautomation controllogix 5570 redundant controller firmware 21.00
• rockwellautomation controllogix 5570 controller firmware 18.00
• rockwellautomation controllogix 5570 controller firmware 19.00
• rockwellautomation controllogix 5570 controller firmware 20.010
• rockwellautomation controllogix 5570 controller firmware 20.013
• rockwellautomation controllogix 5570 controller firmware 21.00
• rockwellautomation controllogix 5560 redundant controller firmware 16.00
• rockwellautomation controllogix 5560 redundant controller firmware 19.00
• rockwellautomation controllogix 5560 redundant controller firmware 20.00
• rockwellautomation controllogix 5560 redundant controller firmware 20.050
• rockwellautomation controllogix 5560 redundant controller firmware 20.055
• rockwellautomation controllogix 5560 controller firmware 16.00
• rockwellautomation controllogix 5560 controller firmware 16.020
• rockwellautomation controllogix 5560 controller firmware 16.022
• rockwellautomation controllogix 5560 controller firmware 17.00
• rockwellautomation controllogix 5560 controller firmware 18.00
• rockwellautomation controllogix 5560 controller firmware 19.00
• rockwellautomation controllogix 5560 controller firmware 20.00
• rockwellautomation controllogix 5560 controller firmware 20.010
• rockwellautomation controllogix 5560 controller firmware 20.013
• rockwellautomation 1769 compactlogix l3x controller firmware 16.00
• rockwellautomation 1769 compactlogix l3x controller firmware 16.020
• rockwellautomation 1769 compactlogix l3x controller firmware 16.023
• rockwellautomation 1769 compactlogix l3x controller firmware 17.00
• rockwellautomation 1769 compactlogix l3x controller firmware 18.00
• rockwellautomation 1769 compactlogix l3x controller firmware 19.00
• rockwellautomation 1769 compactlogix l3x controller firmware 20.00
• rockwellautomation 1769 compactlogix l3x controller firmware 20.010
• rockwellautomation 1769 compactlogix l3x controller firmware 20.013
• rockwellautomation 1769 compactlogix l23x controller firmware 16.00
• rockwellautomation 1769 compactlogix l23x controller firmware 17.00
• rockwellautomation 1769 compactlogix l23x controller firmware 18.00
• rockwellautomation 1769 compactlogix l23x controller firmware 19.00
• rockwellautomation 1769 compactlogix l23x controller firmware 20.00
• rockwellautomation 1769 compactlogix l23x controller firmware 20.010
• rockwellautomation 1769 compactlogix l23x controller firmware 20.013
• rockwellautomation 1769 compactlogix 5370 l3 controller firmware 20.00
… and 25 more
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://www.securityfocus.com/bid/95304 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-343-05 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/95304 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-343-05 Third Party Advisory, US Government Resource