Unrated severityNVD Advisory· Published May 1, 2019· Updated Aug 4, 2024

Rockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption

CVE-2019-10952

Description

An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering

CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rockwellautomation/CompactLogix 5370llm-fuzzy
Range: Versions 20 - 30 and earlier
Rockwellautomation/Compact GuardLogix 5370llm-fuzzy
Range: Versions 20 - 30 and earlier
Rockwellautomation/Guardlogix Controllerscpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0
Rockwellautomation/Compactlogix Controllerscpe-rescue3 versions
0+ 2 more
- (no CPE)range: 0
- (no CPE)range: 0
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/108118mitrevdb-entryx_refsource_BID
ics-cert.us-cert.gov/advisories/ICSA-19-120-01mitrex_refsource_MISC
rockwellautomation.custhelp.com/app/answers/detail/a_id/1075979mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000