CVE-2018-14829

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1220%

EPSS Percentile6.48th

PublishedSep 20, 2018

Last ModifiedNov 21, 2024

Vulnerability Description

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.

Affected Platforms (CPE)

📦

Rockwellautomation

Rslinx

<= 4.00.01

References & Advisories

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02

🔗 https://www.tenable.com/security/research/tra-2018-26