CVE-2019-10952: falha em Rockwell Automation Compact GuardLogix 5370…
Rockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Compact GuardLogix 5370 controllers+ Monitorar CompactLogix 5370 L1 controllers
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 10.0%
An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering
CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.
Produtos afetados
Rockwell Automation · Armor Compact GuardLogix 5370 controllersRockwell Automation · Compact GuardLogix 5370 controllersRockwell Automation · CompactLogix 5370 L1 controllersRockwell Automation · CompactLogix 5370 L2 controllersRockwell Automation · CompactLogix 5370 L3 controllersCVEs relacionadas — Rockwell Automation Compact GuardLogix 5370…
No mesmo produto, das mais perigosas para as menos.
CVE-2019-10954—Rockwell Automation CompactLogix 5370 Stack-based Buffer OverflowEPSS 6.1%CVE-2022-1161CRITICALICSA-22-090-05 Rockwell Automation Logix ControllersEPSS 5.2%CVE-2020-6998MEDIUMRockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input ValidationEPSS 3.2%CVE-2019-10955MEDIUMCVE-2019-10955EPSS 3.0%CVE-2022-1797MEDIUMRockwell Automation Logix Controllers Uncontrolled Resource ConsumptionEPSS 2.2%