CVE-2019-10952

CRITICAL

CompactLogix 5370 & GuardLogix 5370 Firmware 20.011-30.014 - RCE via Stack Overflow

Title source: llm

Description

An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.

References (3)

Core 3

Core References

Various Sources

https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1075979

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-19-120-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/108118

Scores

CVSS v3 9.8

EPSS 0.0051

EPSS Percentile 66.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787 CWE-400

Status published

Products (4)

rockwellautomation/armor_compact_guardlogix_5370_firmware 20.011 - 30.014

rockwellautomation/compactlogix_5370_l1_firmware 20.011 - 30.014

rockwellautomation/compactlogix_5370_l2_firmware 20.011 - 30.014

rockwellautomation/compactlogix_5370_l3_firmware 20.011 - 30.014

Published May 01, 2019

Tracked Since Feb 18, 2026