High severity · published Sep 19, 2016
CVE-2016-5814
Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional…
8.6
CVSS
4.7%
EPSS
No
On KEV
Description
Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
R5
Rslogix 500 Professional Edition · Rockwellautomation
All versions, or not specified · source: NVD
R5
Rslogix 500 Standard Edition · Rockwellautomation
All versions, or not specified · source: NVD
R5
Rslogix 500 Starter Edition · Rockwellautomation
All versions, or not specified · source: NVD
RM
Rslogix Micro Developer · Rockwellautomation
All versions, or not specified · source: NVD
RM
Rslogix Micro Starter Lite · Rockwellautomation
All versions, or not specified · source: NVD
Affected product
R5
Rslogix 500 Professional Edition
Rockwellautomation