CVE-2016-5814

Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file.

Score

CVSS 3.0 8.6 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2016-09-19

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Rslogix 500 Professional Edition (Rockwellautomation)
• Rslogix 500 Standard Edition (Rockwellautomation)
• Rslogix 500 Starter Edition (Rockwellautomation)
• Rslogix Micro Developer (Rockwellautomation)
• Rslogix Micro Starter Lite (Rockwellautomation)

References

• http://www.securityfocus.com/bid/92983
• https://ics-cert.us-cert.gov/advisories/ICSA-16-224-02