Vulnerability Details CVE-2019-10954
An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.8
References
- http://www.securityfocus.com/bid/108118
- https://ics-cert.us-cert.gov/advisories/ICSA-19-120-01
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1075979
- http://www.securityfocus.com/bid/108118
- https://ics-cert.us-cert.gov/advisories/ICSA-19-120-01
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1075979
Products affected by CVE-2019-10954
-
cpe:2.3:h:rockwellautomation:armor_compact_guardlogix_5370:-
-
cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-
-
cpe:2.3:h:rockwellautomation:compactlogix_5370_l1:-
-
cpe:2.3:h:rockwellautomation:compactlogix_5370_l2:-
-
cpe:2.3:h:rockwellautomation:compactlogix_5370_l3:-
-
cpe:2.3:o:rockwellautomation:armor_compact_guardlogix_5370_firmware:20.011
-
cpe:2.3:o:rockwellautomation:armor_compact_guardlogix_5370_firmware:20.012
-
cpe:2.3:o:rockwellautomation:armor_compact_guardlogix_5370_firmware:20.013
-
cpe:2.3:o:rockwellautomation:armor_compact_guardlogix_5370_firmware:30.014
-
cpe:2.3:o:rockwellautomation:compact_guardlogix_5370_firmware:20.011
-
cpe:2.3:o:rockwellautomation:compact_guardlogix_5370_firmware:20.012
-
cpe:2.3:o:rockwellautomation:compact_guardlogix_5370_firmware:20.013
-
cpe:2.3:o:rockwellautomation:compact_guardlogix_5370_firmware:30.014
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l1_firmware:20.011
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l1_firmware:20.012
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l1_firmware:20.013
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l1_firmware:30.014
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l2_firmware:20.011
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l2_firmware:20.012
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l2_firmware:20.013
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l2_firmware:30.014
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l3_firmware:20.011
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l3_firmware:20.012
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l3_firmware:20.013
-
cpe:2.3:o:rockwellautomation:compactlogix_5370_l3_firmware:30.014