CVE-2016-5814: Buffer Overflow

Published Sep 19, 2016

Updated

Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file.

Affected Software

5 affected components

rockwellautomation Rslogix 500 Professional Edition

rockwellautomation Rslogix 500 Standard Edition

rockwellautomation Rslogix 500 Starter Edition

rockwellautomation Rslogix Micro Developer

rockwellautomation Rslogix Micro Starter Lite

Remediation

Patch Available

https://ics-cert.us-cert.gov/advisories/ICSA-16-224-02

Event History

Sep 19, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5814?

CVE-2016-5814 has a high severity rating due to the potential for remote code execution.

How do I fix CVE-2016-5814?

To fix CVE-2016-5814, update to the latest version of the affected software provided by Rockwell Automation.

Which software is affected by CVE-2016-5814?

CVE-2016-5814 affects RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition.

Can CVE-2016-5814 be exploited remotely?

Yes, CVE-2016-5814 can be exploited remotely through a crafted RSS project file.

What type of vulnerability is CVE-2016-5814?

CVE-2016-5814 is a buffer overflow vulnerability that allows attackers to execute arbitrary code.