CVE-2016-5814
Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.67%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file.
- CVSS 3.0
- 8.6 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- EPSS
- 4.67% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- rockwellautomation/rslogix 500 professional edition · rockwellautomation/rslogix 500 standard edition · rockwellautomation/rslogix 500 starter edition · rockwellautomation/rslogix micro developer · rockwellautomation/rslogix micro starter lite
- Source
- ics-cert@hq.dhs.gov
References
- http://www.securityfocus.com/bid/92983
- https://ics-cert.us-cert.gov/advisories/ICSA-16-224-02Mitigation, Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/92983
- https://ics-cert.us-cert.gov/advisories/ICSA-16-224-02Mitigation, Patch, Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.