High ICSA-19-120-01 2 CVEs

ICSA-19-120-01_Rockwell Automation CompactLogix 5370

Published Apr 30, 2019 · Updated Apr 30, 2019

Vendor: Rockwell Automation Product: Armor Compact GuardLogix 5370 controllers Product: Compact GuardLogix 5370 controllers Product: CompactLogix 5370 L1 controllers Product: CompactLogix 5370 L2 controllers Product: CompactLogix 5370 L3 controllers

Summary

Younes Dragoni of Nozomi Networks reported CVE-2019-10952 to NCCIC. George Lashenko of CyberX reported CVE-2019-10954 to NCCIC.

Vulnerabilities 2

Unscored —

CVE-2019-10952

Rockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption

An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Con…

Rockwell Automation Compact GuardLogix 5370 controllers CompactLogix 5370 L1 controllers CompactLogix 5370 L3 controllers ICS / OT

May 1, 2019
Unscored —

CVE-2019-10954

Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow

An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact…

Rockwell Automation Compact GuardLogix 5370 controllers CompactLogix 5370 L1 controllers CompactLogix 5370 L3 controllers ICS / OT

May 1, 2019

Revision history

2019-04-30 #1
ICSA-19-120-01 Rockwell Automation CompactLogix 5370

References

ICS Advisory ICSA-19-120-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-120-01