Unrated severityNVD Advisory· Published May 1, 2019· Updated Aug 4, 2024

Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow

CVE-2019-10954

Description

An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rockwellautomation/Compact GuardLogix 5370llm-create
Range: <=30
Rockwellautomation/CompactLogix 5370llm-fuzzy
Range: <=30
Rockwellautomation/Guardlogix Controllerscpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0
Rockwellautomation/Compactlogix Controllerscpe-rescue3 versions
0+ 2 more
- (no CPE)range: 0
- (no CPE)range: 0
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/108118mitrevdb-entryx_refsource_BID
ics-cert.us-cert.gov/advisories/ICSA-19-120-01mitrex_refsource_MISC
rockwellautomation.custhelp.com/app/answers/detail/a_id/1075979mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000