CVE-2018-14829

2018-09-2000:00:00

CWE-121

icscert

www.cve.org

9.8 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.9%

JSON

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.

CNA Affected

[
  {
    "product": "RSLinx Classic",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "4.00.01 and prior"
      }
    ]
  }
]