CVE-2016-9343: Buffer Overflow
Published Feb 13, 2017
·Updated
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.
Affected Software
202 affected components
rockwellautomation Softlogix 5800 Controller Firmware=18.00
rockwellautomation Softlogix 5800 Controller Firmware=19.00
rockwellautomation Softlogix 5800 Controller Firmware=20.00
rockwellautomation Softlogix 5800 Controller Firmware=21.00
rockwellautomation Softlogix 5800 Controller
rockwellautomation Rslogix Emulate 5000 Firmware=18.00
rockwellautomation Rslogix Emulate 5000 Firmware=19.00
rockwellautomation Rslogix Emulate 5000 Firmware=20.00
rockwellautomation Rslogix Emulate 5000 Firmware=21.00
rockwellautomation Rslogix Emulate 5000
rockwellautomation Guardlogix 5570 Controller Firmware=16.00
rockwellautomation Guardlogix 5570 Controller Firmware=17.00
rockwellautomation Guardlogix 5570 Controller Firmware=18.00
rockwellautomation Guardlogix 5570 Controller Firmware=19.00
rockwellautomation Guardlogix 5570 Controller Firmware=20.00
rockwellautomation Guardlogix 5570 Controller Firmware=20.010
rockwellautomation Guardlogix 5570 Controller Firmware=20.017
rockwellautomation Guardlogix 5570 Controller Firmware=21.00
rockwellautomation Guardlogix 5570 Controller
rockwellautomation Flexlogix L34 Controller Firmware=16.00
rockwellautomation Flexlogix L34 Controller
rockwellautomation Controllogix L55 Controller Firmware=16.00
rockwellautomation Controllogix L55 Controller Firmware=16.020
rockwellautomation Controllogix L55 Controller Firmware=16.022
rockwellautomation Controllogix L55 Controller
rockwellautomation Controllogix 5570 Redundant Controller Firmware=20.00
rockwellautomation Controllogix 5570 Redundant Controller Firmware=20.050
rockwellautomation Controllogix 5570 Redundant Controller Firmware=20.055
rockwellautomation Controllogix 5570 Redundant Controller Firmware=21.00
rockwellautomation Controllogix 5570 Redundant Controller
rockwellautomation Controllogix 5570 Controller Firmware=18.00
rockwellautomation Controllogix 5570 Controller Firmware=19.00
rockwellautomation Controllogix 5570 Controller Firmware=20.010
rockwellautomation Controllogix 5570 Controller Firmware=20.013
rockwellautomation Controllogix 5570 Controller Firmware=21.00
rockwellautomation Controllogix 5570 Controller
rockwellautomation Controllogix 5560 Redundant Controller Firmware=16.00
rockwellautomation Controllogix 5560 Redundant Controller Firmware=19.00
rockwellautomation Controllogix 5560 Redundant Controller Firmware=20.00
rockwellautomation Controllogix 5560 Redundant Controller Firmware=20.050
rockwellautomation Controllogix 5560 Redundant Controller Firmware=20.055
rockwellautomation Controllogix 5560 Redundant Controller
rockwellautomation Controllogix 5560 Controller Firmware=16.00
rockwellautomation Controllogix 5560 Controller Firmware=16.020
rockwellautomation Controllogix 5560 Controller Firmware=16.022
rockwellautomation Controllogix 5560 Controller Firmware=17.00
rockwellautomation Controllogix 5560 Controller Firmware=18.00
rockwellautomation Controllogix 5560 Controller Firmware=19.00
rockwellautomation Controllogix 5560 Controller Firmware=20.00
rockwellautomation Controllogix 5560 Controller Firmware=20.010
rockwellautomation Controllogix 5560 Controller Firmware=20.013
rockwellautomation Controllogix 5560 Controller
rockwellautomation 1769 Compactlogix L3x Controller Firmware=16.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=16.020
rockwellautomation 1769 Compactlogix L3x Controller Firmware=16.023
rockwellautomation 1769 Compactlogix L3x Controller Firmware=17.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=18.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=19.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=20.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=20.010
rockwellautomation 1769 Compactlogix L3x Controller Firmware=20.013
rockwellautomation 1769 Compactlogix L3x Controller
rockwellautomation 1769 Compactlogix L23x Controller Firmware=16.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=17.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=18.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=19.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=20.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=20.010
rockwellautomation 1769 Compactlogix L23x Controller Firmware=20.013
rockwellautomation 1769 Compactlogix L23x Controller
rockwellautomation 1769 Compactlogix 5370 L3 Controller Firmware=20.00
rockwellautomation 1769 Compactlogix 5370 L3 Controller Firmware=20.010
rockwellautomation 1769 Compactlogix 5370 L3 Controller Firmware=20.013
rockwellautomation 1769 Compactlogix 5370 L3 Controller Firmware=21.00
rockwellautomation 1769 Compactlogix 5370 L3 Controller
rockwellautomation 1769 Compactlogix 5370 L2 Controller Firmware=20.00
rockwellautomation 1769 Compactlogix 5370 L2 Controller Firmware=20.010
rockwellautomation 1769 Compactlogix 5370 L2 Controller Firmware=20.013
rockwellautomation 1769 Compactlogix 5370 L2 Controller Firmware=21.00
rockwellautomation 1769 Compactlogix 5370 L2 Controller
rockwellautomation 1769 Compactlogix 5370 L1 Controller Firmware=20.00
rockwellautomation 1769 Compactlogix 5370 L1 Controller Firmware=20.010
rockwellautomation 1769 Compactlogix 5370 L1 Controller Firmware=20.013
rockwellautomation 1769 Compactlogix 5370 L1 Controller Firmware=21.00
rockwellautomation 1769 Compactlogix 5370 L1 Controller
rockwellautomation 1768 Compactlogix L4x Controller Firmware=16.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=16.020
rockwellautomation 1768 Compactlogix L4x Controller Firmware=16.025
rockwellautomation 1768 Compactlogix L4x Controller Firmware=17.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=18.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=19.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=20.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=20.011
rockwellautomation 1768 Compactlogix L4x Controller Firmware=20.016
rockwellautomation 1768 Compactlogix L4x Controller
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=18.00
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=19.00
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=20.00
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=20.011
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=20.013
rockwellautomation 1768 Compact Guardlogix L4xs Controller
All of the following
Any of the following
rockwellautomation Softlogix 5800 Controller Firmware=18.00
rockwellautomation Softlogix 5800 Controller Firmware=19.00
rockwellautomation Softlogix 5800 Controller Firmware=20.00
rockwellautomation Softlogix 5800 Controller Firmware=21.00
rockwellautomation Softlogix 5800 Controller
All of the following
Any of the following
rockwellautomation Rslogix Emulate 5000 Firmware=18.00
rockwellautomation Rslogix Emulate 5000 Firmware=19.00
rockwellautomation Rslogix Emulate 5000 Firmware=20.00
rockwellautomation Rslogix Emulate 5000 Firmware=21.00
rockwellautomation Rslogix Emulate 5000
All of the following
Any of the following
rockwellautomation Guardlogix 5570 Controller Firmware=16.00
rockwellautomation Guardlogix 5570 Controller Firmware=17.00
rockwellautomation Guardlogix 5570 Controller Firmware=18.00
rockwellautomation Guardlogix 5570 Controller Firmware=19.00
rockwellautomation Guardlogix 5570 Controller Firmware=20.00
rockwellautomation Guardlogix 5570 Controller Firmware=20.010
rockwellautomation Guardlogix 5570 Controller Firmware=20.017
rockwellautomation Guardlogix 5570 Controller Firmware=21.00
rockwellautomation Guardlogix 5570 Controller
All of the following
rockwellautomation Flexlogix L34 Controller Firmware=16.00
rockwellautomation Flexlogix L34 Controller
All of the following
Any of the following
rockwellautomation Controllogix L55 Controller Firmware=16.00
rockwellautomation Controllogix L55 Controller Firmware=16.020
rockwellautomation Controllogix L55 Controller Firmware=16.022
rockwellautomation Controllogix L55 Controller
All of the following
Any of the following
rockwellautomation Controllogix 5570 Redundant Controller Firmware=20.00
rockwellautomation Controllogix 5570 Redundant Controller Firmware=20.050
rockwellautomation Controllogix 5570 Redundant Controller Firmware=20.055
rockwellautomation Controllogix 5570 Redundant Controller Firmware=21.00
rockwellautomation Controllogix 5570 Redundant Controller
All of the following
Any of the following
rockwellautomation Controllogix 5570 Controller Firmware=18.00
rockwellautomation Controllogix 5570 Controller Firmware=19.00
rockwellautomation Controllogix 5570 Controller Firmware=20.010
rockwellautomation Controllogix 5570 Controller Firmware=20.013
rockwellautomation Controllogix 5570 Controller Firmware=21.00
rockwellautomation Controllogix 5570 Controller
All of the following
Any of the following
rockwellautomation Controllogix 5560 Redundant Controller Firmware=16.00
rockwellautomation Controllogix 5560 Redundant Controller Firmware=19.00
rockwellautomation Controllogix 5560 Redundant Controller Firmware=20.00
rockwellautomation Controllogix 5560 Redundant Controller Firmware=20.050
rockwellautomation Controllogix 5560 Redundant Controller Firmware=20.055
rockwellautomation Controllogix 5560 Redundant Controller
All of the following
Any of the following
rockwellautomation Controllogix 5560 Controller Firmware=16.00
rockwellautomation Controllogix 5560 Controller Firmware=16.020
rockwellautomation Controllogix 5560 Controller Firmware=16.022
rockwellautomation Controllogix 5560 Controller Firmware=17.00
rockwellautomation Controllogix 5560 Controller Firmware=18.00
rockwellautomation Controllogix 5560 Controller Firmware=19.00
rockwellautomation Controllogix 5560 Controller Firmware=20.00
rockwellautomation Controllogix 5560 Controller Firmware=20.010
rockwellautomation Controllogix 5560 Controller Firmware=20.013
rockwellautomation Controllogix 5560 Controller
All of the following
Any of the following
rockwellautomation 1769 Compactlogix L3x Controller Firmware=16.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=16.020
rockwellautomation 1769 Compactlogix L3x Controller Firmware=16.023
rockwellautomation 1769 Compactlogix L3x Controller Firmware=17.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=18.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=19.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=20.00
rockwellautomation 1769 Compactlogix L3x Controller Firmware=20.010
rockwellautomation 1769 Compactlogix L3x Controller Firmware=20.013
rockwellautomation 1769 Compactlogix L3x Controller
All of the following
Any of the following
rockwellautomation 1769 Compactlogix L23x Controller Firmware=16.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=17.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=18.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=19.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=20.00
rockwellautomation 1769 Compactlogix L23x Controller Firmware=20.010
rockwellautomation 1769 Compactlogix L23x Controller Firmware=20.013
rockwellautomation 1769 Compactlogix L23x Controller
All of the following
Any of the following
rockwellautomation 1769 Compactlogix 5370 L3 Controller Firmware=20.00
rockwellautomation 1769 Compactlogix 5370 L3 Controller Firmware=20.010
rockwellautomation 1769 Compactlogix 5370 L3 Controller Firmware=20.013
rockwellautomation 1769 Compactlogix 5370 L3 Controller Firmware=21.00
rockwellautomation 1769 Compactlogix 5370 L3 Controller
All of the following
Any of the following
rockwellautomation 1769 Compactlogix 5370 L2 Controller Firmware=20.00
rockwellautomation 1769 Compactlogix 5370 L2 Controller Firmware=20.010
rockwellautomation 1769 Compactlogix 5370 L2 Controller Firmware=20.013
rockwellautomation 1769 Compactlogix 5370 L2 Controller Firmware=21.00
rockwellautomation 1769 Compactlogix 5370 L2 Controller
All of the following
Any of the following
rockwellautomation 1769 Compactlogix 5370 L1 Controller Firmware=20.00
rockwellautomation 1769 Compactlogix 5370 L1 Controller Firmware=20.010
rockwellautomation 1769 Compactlogix 5370 L1 Controller Firmware=20.013
rockwellautomation 1769 Compactlogix 5370 L1 Controller Firmware=21.00
rockwellautomation 1769 Compactlogix 5370 L1 Controller
All of the following
Any of the following
rockwellautomation 1768 Compactlogix L4x Controller Firmware=16.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=16.020
rockwellautomation 1768 Compactlogix L4x Controller Firmware=16.025
rockwellautomation 1768 Compactlogix L4x Controller Firmware=17.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=18.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=19.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=20.00
rockwellautomation 1768 Compactlogix L4x Controller Firmware=20.011
rockwellautomation 1768 Compactlogix L4x Controller Firmware=20.016
rockwellautomation 1768 Compactlogix L4x Controller
All of the following
Any of the following
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=18.00
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=19.00
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=20.00
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=20.011
rockwellautomation 1768 Compact Guardlogix L4xs Controller Firmware=20.013
rockwellautomation 1768 Compact Guardlogix L4xs Controller
Event History
Feb 13, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Data Sourced
via NVD·09:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9343?
CVE-2016-9343 has a medium severity level due to the potential for a stack overflow that can be exploited via malformed CIP packets.
2
How do I fix CVE-2016-9343?
To mitigate CVE-2016-9343, update the firmware of the affected Rockwell Automation controllers to versions beyond FRN 21.00.
3
Which versions are affected by CVE-2016-9343?
CVE-2016-9343 affects Rockwell Automation Logix5000 controllers with firmware versions FRN 16.00 through 21.00.
4
What type of impact can CVE-2016-9343 have on systems?
Exploitation of CVE-2016-9343 could allow an attacker to crash the affected system or potentially execute arbitrary code.
5
Is my Rockwell Automation device vulnerable to CVE-2016-9343?
To determine vulnerability to CVE-2016-9343, check if your device operates with firmware versions FRN 16.00 to 21.00.