Lucene search

K
nessusThis script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500201.NASL
HistoryNov 08, 2019 - 12:00 a.m.

Rockwellautomation Compactlogix Improper Restriction of Operations within the Bounds of a Memory Buffer

2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10

0.009 Low

EPSS

Percentile

83.1%

An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 to 30.014 and earlier systems.

File data ot_500201.nasl
VendorProductVersionCPE
rockwellautomationcompactlogix_5370_l1_firmware*cpe:2.3:o:rockwellautomation:compactlogix_5370_l1_firmware:*:*:*:*:*:*:*:*
rockwellautomationcompactlogix_5370_l1-cpe:2.3:h:rockwellautomation:compactlogix_5370_l1:-:*:*:*:*:*:*:*
rockwellautomationcompactlogix_5370_l2_firmware*cpe:2.3:o:rockwellautomation:compactlogix_5370_l2_firmware:*:*:*:*:*:*:*:*
rockwellautomationcompactlogix_5370_l2-cpe:2.3:h:rockwellautomation:compactlogix_5370_l2:-:*:*:*:*:*:*:*
rockwellautomationcompactlogix_5370_l3_firmware*cpe:2.3:o:rockwellautomation:compactlogix_5370_l3_firmware:*:*:*:*:*:*:*:*
rockwellautomationcompactlogix_5370_l3-cpe:2.3:h:rockwellautomation:compactlogix_5370_l3:-:*:*:*:*:*:*:*
rockwellautomationarmor_compact_guardlogix_5370_firmware*cpe:2.3:o:rockwellautomation:armor_compact_guardlogix_5370_firmware:*:*:*:*:*:*:*:*
rockwellautomationarmor_compact_guardlogix_5370-cpe:2.3:h:rockwellautomation:armor_compact_guardlogix_5370:-:*:*:*:*:*:*:*

0.009 Low

EPSS

Percentile

83.1%