VulnerabilityModified

CVE-2019-10955

MEDIUM 6.1EPSS 3.06%

Does this matter?

Lower severity and a low EPSS score (3.06%). Track it; it rarely justifies an emergency change on its own.

Description

In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers (includes CompactLogix GuardLogix controllers) v30.014 and earlier, an open redirect vulnerability could allow a remote unauthenticated attacker to input a malicious link to redirect users to a malicious site that could run or download arbitrary malware on the user’s machine.

CVSS 3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 3.06% probability · 88th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-601
Affected: rockwellautomation/micrologix 1400 a firmware · rockwellautomation/micrologix 1400 b firmware · rockwellautomation/micrologix 1100 firmware · rockwellautomation/compactlogix 5370 l1 firmware · rockwellautomation/compactlogix 5370 l2 firmware · rockwellautomation/compactlogix 5370 l3 firmware
Source: ics-cert@hq.dhs.gov

EPSS trend

EPSS 3.1% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-113-01Third Party Advisory, US Government Resource
https://www.securityfocus.com/bid/108049Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-113-01Third Party Advisory, US Government Resource
https://www.securityfocus.com/bid/108049Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.