CVE Feed

    Dashboard / CVE / CVE-2016-9343

    CVE-2016-9343

    An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.

    Published:Feb 13, 2017
    Last Modified:Apr 20, 2025
    EPS:Feb 13, 2017
    EPSS Score:0.00054
    CVSS Score:10

    Affected Products

    Vendor
    Rockwellautomation
    Product
    1768 Compact Guardlogix L4xs Controller
    Vendor
    Rockwellautomation
    Product
    1768 Compact Guardlogix L4xs Controller Firmware
    Vendor
    Rockwellautomation
    Product
    1768 Compactlogix L4x Controller
    Vendor
    Rockwellautomation
    Product
    1768 Compactlogix L4x Controller Firmware
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix 5370 L1 Controller
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix 5370 L1 Controller Firmware
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix 5370 L2 Controller
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix 5370 L2 Controller Firmware
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix 5370 L3 Controller
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix 5370 L3 Controller Firmware
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix L23x Controller
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix L23x Controller Firmware
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix L3x Controller
    Vendor
    Rockwellautomation
    Product
    1769 Compactlogix L3x Controller Firmware
    Vendor
    Rockwellautomation
    Product
    Controllogix 5560 Controller
    Vendor
    Rockwellautomation
    Product
    Controllogix 5560 Controller Firmware
    Vendor
    Rockwellautomation
    Product
    Controllogix 5560 Redundant Controller
    Vendor
    Rockwellautomation
    Product
    Controllogix 5560 Redundant Controller Firmware
    Vendor
    Rockwellautomation
    Product
    Controllogix 5570 Controller
    Vendor
    Rockwellautomation
    Product
    Controllogix 5570 Controller Firmware
    Vendor
    Rockwellautomation
    Product
    Controllogix 5570 Redundant Controller
    Vendor
    Rockwellautomation
    Product
    Controllogix 5570 Redundant Controller Firmware
    Vendor
    Rockwellautomation
    Product
    Controllogix L55 Controller
    Vendor
    Rockwellautomation
    Product
    Controllogix L55 Controller Firmware
    Vendor
    Rockwellautomation
    Product
    Flexlogix L34 Controller
    Vendor
    Rockwellautomation
    Product
    Flexlogix L34 Controller Firmware
    Vendor
    Rockwellautomation
    Product
    Guardlogix 5570 Controller
    Vendor
    Rockwellautomation
    Product
    Guardlogix 5570 Controller Firmware
    Vendor
    Rockwellautomation
    Product
    Rslogix Emulate 5000
    Vendor
    Rockwellautomation
    Product
    Rslogix Emulate 5000 Firmware
    Vendor
    Rockwellautomation
    Product
    Softlogix 5800 Controller
    Vendor
    Rockwellautomation
    Product
    Softlogix 5800 Controller Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High