RA.RSLinx.Classic.Forward.Open.Electronic.Key.Buffer.Overflow

description-logoDescription

This indicates an attack attempt on a Stack Buffer Overflow vulnerability in Rockwell Automation RSLinx Classic.
A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system. Successful exploitation results in arbitrary code execution under the context of the user process. An unsuccessful attempt may result in abnormal termination of the target service.

affected-products-logoAffected Products

Rockwell Automation RSLinx Classic 4.10.00 and prior

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor:
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1085038

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2019-06-06 14.627 Severity:high:critical
2019-04-23 14.598 Default_action:pass:drop
2019-04-10 14.590

References

ICSA-19-064-01