VYPR

Compact GuardLogix 5370 Controllers

by Rockwellautomation

CVEs (2)

  • CVE-2019-10952CriMay 1, 2019
    risk 0.64cvss 9.8epss 0.10

    An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact…

  • CVE-2019-10954HigMay 1, 2019
    risk 0.49cvss 7.5epss 0.06

    An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370…