CVE-2018-14829 Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software appli...
CriticalCVSS 9.8
EPSS 16.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation rslinx | <= 4.00.01 | No fix listed |
| Rockwell Automation RSLinx Classic® | = 4.00.01 and prior | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- www.tenable.com exploit third-party-advisory