Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-10955

In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers (includes CompactLogix GuardLogix controllers) v30.014 and earlier, an open redirect vulnerability could allow a remote unauthenticated attacker to input a malicious link to redirect users to a malicious site that could run or download arbitrary malware on the user’s machine.

Published

2019-04-25T18:29:00.397

Last Modified

2024-11-21T04:20:13.710

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

4.9

Weaknesses
  • Type: Secondary
    CWE-601
  • Type: Primary
    CWE-601
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System rockwellautomation micrologix_1400_a_firmware * Yes
Operating System rockwellautomation micrologix_1400_b_firmware ≤ 15.002 Yes
Hardware rockwellautomation micrologix_1400 - No
Operating System rockwellautomation micrologix_1100_firmware ≤ 14.00 Yes
Hardware rockwellautomation micrologix_1100 - No
Operating System rockwellautomation compactlogix_5370_l1_firmware ≤ 30.014 Yes
Hardware rockwellautomation compactlogix_5370_l1 - No
Operating System rockwellautomation compactlogix_5370_l2_firmware ≤ 30.014 Yes
Hardware rockwellautomation compactlogix_5370_l2 - No
Operating System rockwellautomation compactlogix_5370_l3_firmware ≤ 30.014 Yes
Hardware rockwellautomation compactlogix_5370_l3 - No
References