Details of VAR-201702-0846

ID

VAR-201702-0846

CVE

CVE-2016-9343

TITLE

Rockwell Automation Logix5000 Controllers Stack Buffer Overflow Vulnerability

Trust: 0.8

sources: IVD: a08db64d-d93e-49ce-82e1-7dccacb3db82 // CNVD: CNVD-2017-00316

DESCRIPTION

An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service. Rockwell Automation is a UK company that provides industrial automation control and global information. Logix5000Controllers is the company's controller family. A remote stack buffer overflow vulnerability exists in RockwellAutomationLogix5000Controllers. An attacker could exploit this vulnerability to execute arbitrary code in an application environment. Rockwell Automation Logix5000 Controllers are prone to a remote stack-based buffer-overflow vulnerability. Failed exploit attempts will result in a denial-of-service condition

Trust: 2.79

sources: NVD: CVE-2016-9343 // JVNDB: JVNDB-2016-008010 // CNVD: CNVD-2017-00316 // BID: 95304 // IVD: a08db64d-d93e-49ce-82e1-7dccacb3db82 // VULHUB: VHN-98163 // VULMON: CVE-2016-9343

IOT TAXONOMY

category:	['ICS', 'Network device']	sub_category:	-	Trust: 0.6
category:	['ICS']	sub_category:	-	Trust: 0.2

sources: IVD: a08db64d-d93e-49ce-82e1-7dccacb3db82 // CNVD: CNVD-2017-00316

AFFECTED PRODUCTS

vendor:	rockwellautomation	model:	controllogix 5560 controller	scope:	eq	version:	17.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l23x controller	scope:	eq	version:	17.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 redundant controller	scope:	eq	version:	20.050	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l2 controller	scope:	eq	version:	21.00	Trust: 1.0
vendor:	rockwellautomation	model:	rslogix emulate 5000	scope:	eq	version:	18.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l2 controller	scope:	eq	version:	20.010	Trust: 1.0
vendor:	rockwellautomation	model:	rslogix emulate 5000	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compactlogix l4x controller	scope:	eq	version:	16.025	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 redundant controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	20.011	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l3x controller	scope:	eq	version:	16.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l1 controller	scope:	eq	version:	20.013	Trust: 1.0
vendor:	rockwellautomation	model:	softlogix 5800 controller	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l3 controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 controller	scope:	eq	version:	16.022	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l3x controller	scope:	eq	version:	18.00	Trust: 1.0
vendor:	rockwellautomation	model:	guardlogix 5570 controller	scope:	eq	version:	20.017	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l3x controller	scope:	eq	version:	17.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compactlogix l4x controller	scope:	eq	version:	20.011	Trust: 1.0
vendor:	rockwellautomation	model:	softlogix 5800 controller	scope:	eq	version:	21.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l3x controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compactlogix l4x controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l3 controller	scope:	eq	version:	20.010	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix l55 controller	scope:	eq	version:	16.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5570 controller	scope:	eq	version:	20.013	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 controller	scope:	eq	version:	20.013	Trust: 1.0
vendor:	rockwellautomation	model:	guardlogix 5570 controller	scope:	eq	version:	17.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l23x controller	scope:	eq	version:	20.013	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l1 controller	scope:	eq	version:	21.00	Trust: 1.0
vendor:	rockwellautomation	model:	guardlogix 5570 controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l1 controller	scope:	eq	version:	20.010	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compactlogix l4x controller	scope:	eq	version:	20.016	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l3x controller	scope:	eq	version:	16.020	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5570 redundant controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	guardlogix 5570 controller	scope:	eq	version:	20.010	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5570 controller	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 controller	scope:	eq	version:	16.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5570 controller	scope:	eq	version:	21.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l3 controller	scope:	eq	version:	20.013	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l23x controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 controller	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	20.013	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5570 controller	scope:	eq	version:	20.010	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 redundant controller	scope:	eq	version:	20.055	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix l55 controller	scope:	eq	version:	16.020	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l3x controller	scope:	eq	version:	20.013	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l2 controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 redundant controller	scope:	eq	version:	16.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 controller	scope:	eq	version:	20.010	Trust: 1.0
vendor:	rockwellautomation	model:	rslogix emulate 5000	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l23x controller	scope:	eq	version:	20.010	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 controller	scope:	eq	version:	18.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 redundant controller	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	rslogix emulate 5000	scope:	eq	version:	21.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	softlogix 5800 controller	scope:	eq	version:	18.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	18.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compactlogix l4x controller	scope:	eq	version:	16.00	Trust: 1.0
vendor:	rockwellautomation	model:	softlogix 5800 controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l3 controller	scope:	eq	version:	21.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l3x controller	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compactlogix l4x controller	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5560 controller	scope:	eq	version:	16.020	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compactlogix l4x controller	scope:	eq	version:	18.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compactlogix l4x controller	scope:	eq	version:	17.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l3x controller	scope:	eq	version:	20.010	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5570 redundant controller	scope:	eq	version:	20.050	Trust: 1.0
vendor:	rockwellautomation	model:	guardlogix 5570 controller	scope:	eq	version:	16.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5570 redundant controller	scope:	eq	version:	20.055	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l1 controller	scope:	eq	version:	20.00	Trust: 1.0
vendor:	rockwellautomation	model:	guardlogix 5570 controller	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	guardlogix 5570 controller	scope:	eq	version:	18.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix 5370 l2 controller	scope:	eq	version:	20.013	Trust: 1.0
vendor:	rockwellautomation	model:	guardlogix 5570 controller	scope:	eq	version:	21.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l3x controller	scope:	eq	version:	16.023	Trust: 1.0
vendor:	rockwellautomation	model:	flexlogix l34 controller	scope:	eq	version:	16.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5570 controller	scope:	eq	version:	18.00	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l23x controller	scope:	eq	version:	16.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix 5570 redundant controller	scope:	eq	version:	21.00	Trust: 1.0
vendor:	rockwellautomation	model:	1768 compactlogix l4x controller	scope:	eq	version:	16.020	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l23x controller	scope:	eq	version:	19.00	Trust: 1.0
vendor:	rockwellautomation	model:	controllogix l55 controller	scope:	eq	version:	16.022	Trust: 1.0
vendor:	rockwellautomation	model:	1769 compactlogix l23x controller	scope:	eq	version:	18.00	Trust: 1.0
vendor:	rockwell automation	model:	1768 compact guardlogix l4xs controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	1768 compactlogix l4x controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	1769 compactlogix 5370 l1 controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	1769 compactlogix 5370 l2 controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	1769 compactlogix 5370 l3 controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	1769 compactlogix l23x controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	1769 compactlogix l3x controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	controllogix 5560 redundant controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	controllogix 5560 controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	controllogix 5570 redundant controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	controllogix 5570 controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	controllogix l55 controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	flexlogix l34 controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	guardlogix 5570 controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	rslogix emulate 5000	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell automation	model:	softlogix 5800 controller	scope:	-	version:	-	Trust: 0.8
vendor:	rockwell	model:	automation logix5000 controllers	scope:	-	version:	-	Trust: 0.6
vendor:	rockwell automation	model:	1768 compactlogix l4x controller	scope:	eq	version:	16.025	Trust: 0.6
vendor:	rockwell automation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	19.00	Trust: 0.6
vendor:	rockwell automation	model:	1768 compactlogix l4x controller	scope:	eq	version:	16.020	Trust: 0.6
vendor:	rockwell automation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	20.011	Trust: 0.6
vendor:	rockwell automation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	20.013	Trust: 0.6
vendor:	rockwell automation	model:	1768 compactlogix l4x controller	scope:	eq	version:	17.00	Trust: 0.6
vendor:	rockwell automation	model:	1769 compactlogix 5370 l3 controller	scope:	eq	version:	20.013	Trust: 0.6
vendor:	rockwell automation	model:	1768 compactlogix l4x controller	scope:	eq	version:	16.00	Trust: 0.6
vendor:	rockwell automation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	18.00	Trust: 0.6
vendor:	rockwell automation	model:	1768 compact guardlogix l4xs controller	scope:	eq	version:	20.00	Trust: 0.6
vendor:	rockwell	model:	automation softlogix controllers	scope:	eq	version:	580021.00	Trust: 0.3
vendor:	rockwell	model:	automation softlogix controllers	scope:	eq	version:	580020.00	Trust: 0.3
vendor:	rockwell	model:	automation softlogix controllers	scope:	eq	version:	580019.00	Trust: 0.3
vendor:	rockwell	model:	automation softlogix controllers	scope:	eq	version:	580018.00	Trust: 0.3
vendor:	rockwell	model:	automation rslogix emulate	scope:	eq	version:	500021.00	Trust: 0.3
vendor:	rockwell	model:	automation rslogix emulate	scope:	eq	version:	500020.00	Trust: 0.3
vendor:	rockwell	model:	automation rslogix emulate	scope:	eq	version:	500019.00	Trust: 0.3
vendor:	rockwell	model:	automation rslogix emulate	scope:	eq	version:	500018.00	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	557021.00	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	557020.017	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	557020.010	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	557020.00	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	556020.017	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	556020.010	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	556020.00	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	556019.00	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	556018.00	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	556017.00	Trust: 0.3
vendor:	rockwell	model:	automation guardlogix controllers	scope:	eq	version:	556016.00	Trust: 0.3
vendor:	rockwell	model:	automation flexlogix l34 controllers	scope:	eq	version:	16.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix l55 controllers	scope:	eq	version:	16.022	Trust: 0.3
vendor:	rockwell	model:	automation controllogix l55 controllers	scope:	eq	version:	16.020	Trust: 0.3
vendor:	rockwell	model:	automation controllogix l55 controllers	scope:	eq	version:	16.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix redundant controllers	scope:	eq	version:	557021.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix redundant controllers	scope:	eq	version:	557020.055	Trust: 0.3
vendor:	rockwell	model:	automation controllogix redundant controllers	scope:	eq	version:	557020.050	Trust: 0.3
vendor:	rockwell	model:	automation controllogix redundant controllers	scope:	eq	version:	557020.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	557021.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	557020.013	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	557020.010	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	557019.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	557018.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix redundant controllers	scope:	eq	version:	556020.055	Trust: 0.3
vendor:	rockwell	model:	automation controllogix redundant controllers	scope:	eq	version:	556020.050	Trust: 0.3
vendor:	rockwell	model:	automation controllogix redundant controllers	scope:	eq	version:	556020.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix redundant controllers	scope:	eq	version:	556019.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix redundant controllers	scope:	eq	version:	556016.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	556020.013	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	556020.010	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	556020.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	556019.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	556018.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	556017.00	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	556016.022	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	556016.020	Trust: 0.3
vendor:	rockwell	model:	automation controllogix controllers	scope:	eq	version:	556016.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3x controllers	scope:	eq	version:	176920.013	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3x controllers	scope:	eq	version:	176920.010	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3x controllers	scope:	eq	version:	176920.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3x controllers	scope:	eq	version:	176919.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3x controllers	scope:	eq	version:	176918.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3x controllers	scope:	eq	version:	176917.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3x controllers	scope:	eq	version:	176916.023	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3x controllers	scope:	eq	version:	176916.020	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3x controllers	scope:	eq	version:	176916.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l23x controllers	scope:	eq	version:	176920.013	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l23x controllers	scope:	eq	version:	176920.010	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l23x controllers	scope:	eq	version:	176920.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l23x controllers	scope:	eq	version:	176919.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l23x controllers	scope:	eq	version:	176918.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l23x controllers	scope:	eq	version:	176917.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l23x controllers	scope:	eq	version:	176916.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3 controllers	scope:	eq	version:	1769537021.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3 controllers	scope:	eq	version:	1769537020.013	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3 controllers	scope:	eq	version:	1769537020.010	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l3 controllers	scope:	eq	version:	1769537020.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l2 controllers	scope:	eq	version:	1769537021.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l2 controllers	scope:	eq	version:	1769537020.013	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l2 controllers	scope:	eq	version:	1769537020.010	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l2 controllers	scope:	eq	version:	1769537020.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l1 controllers	scope:	eq	version:	1769537021.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l1 controllers	scope:	eq	version:	1769537020.013	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l1 controllers	scope:	eq	version:	1769537020.010	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l1 controllers	scope:	eq	version:	1769537020.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l4x controllers	scope:	eq	version:	176820.016	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l4x controllers	scope:	eq	version:	176820.011	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l4x controllers	scope:	eq	version:	176820.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l4x controllers	scope:	eq	version:	176819.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l4x controllers	scope:	eq	version:	176818.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l4x controllers	scope:	eq	version:	176817.00	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l4x controllers	scope:	eq	version:	176816.025	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l4x controllers	scope:	eq	version:	176816.020	Trust: 0.3
vendor:	rockwell	model:	automation compactlogix l4x controllers	scope:	eq	version:	176816.00	Trust: 0.3
vendor:	rockwell	model:	automation compact guardlogix l4xs controllers	scope:	eq	version:	176820.013	Trust: 0.3
vendor:	rockwell	model:	automation compact guardlogix l4xs controllers	scope:	eq	version:	176820.011	Trust: 0.3
vendor:	rockwell	model:	automation compact guardlogix l4xs controllers	scope:	eq	version:	176820.00	Trust: 0.3
vendor:	rockwell	model:	automation compact guardlogix l4xs controllers	scope:	eq	version:	176819.00	Trust: 0.3
vendor:	rockwell	model:	automation compact guardlogix l4xs	scope:	eq	version:	176818.00	Trust: 0.3
vendor:	softlogix 5800 controller	model:	-	scope:	eq	version:	18.00	Trust: 0.2
vendor:	softlogix 5800 controller	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	softlogix 5800 controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	softlogix 5800 controller	model:	-	scope:	eq	version:	21.00	Trust: 0.2
vendor:	1769 compactlogix l3x controller	model:	-	scope:	eq	version:	16.00	Trust: 0.2
vendor:	1769 compactlogix l3x controller	model:	-	scope:	eq	version:	16.020	Trust: 0.2
vendor:	1769 compactlogix l3x controller	model:	-	scope:	eq	version:	16.023	Trust: 0.2
vendor:	1769 compactlogix l3x controller	model:	-	scope:	eq	version:	17.00	Trust: 0.2
vendor:	1769 compactlogix l3x controller	model:	-	scope:	eq	version:	18.00	Trust: 0.2
vendor:	1769 compactlogix l3x controller	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	1769 compactlogix l3x controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	1769 compactlogix l3x controller	model:	-	scope:	eq	version:	20.010	Trust: 0.2
vendor:	1769 compactlogix l3x controller	model:	-	scope:	eq	version:	20.013	Trust: 0.2
vendor:	1769 compactlogix l23x controller	model:	-	scope:	eq	version:	16.00	Trust: 0.2
vendor:	1769 compactlogix l23x controller	model:	-	scope:	eq	version:	17.00	Trust: 0.2
vendor:	1769 compactlogix l23x controller	model:	-	scope:	eq	version:	18.00	Trust: 0.2
vendor:	1769 compactlogix l23x controller	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	1769 compactlogix l23x controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	1769 compactlogix l23x controller	model:	-	scope:	eq	version:	20.010	Trust: 0.2
vendor:	1769 compactlogix l23x controller	model:	-	scope:	eq	version:	20.013	Trust: 0.2
vendor:	1769 compactlogix 5370 l3 controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	1769 compactlogix 5370 l3 controller	model:	-	scope:	eq	version:	20.010	Trust: 0.2
vendor:	1769 compactlogix 5370 l3 controller	model:	-	scope:	eq	version:	20.013	Trust: 0.2
vendor:	1769 compactlogix 5370 l3 controller	model:	-	scope:	eq	version:	21.00	Trust: 0.2
vendor:	1769 compactlogix 5370 l2 controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	1769 compactlogix 5370 l2 controller	model:	-	scope:	eq	version:	20.010	Trust: 0.2
vendor:	1769 compactlogix 5370 l2 controller	model:	-	scope:	eq	version:	20.013	Trust: 0.2
vendor:	1769 compactlogix 5370 l2 controller	model:	-	scope:	eq	version:	21.00	Trust: 0.2
vendor:	1769 compactlogix 5370 l1 controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	1769 compactlogix 5370 l1 controller	model:	-	scope:	eq	version:	20.010	Trust: 0.2
vendor:	1769 compactlogix 5370 l1 controller	model:	-	scope:	eq	version:	20.013	Trust: 0.2
vendor:	1769 compactlogix 5370 l1 controller	model:	-	scope:	eq	version:	21.00	Trust: 0.2
vendor:	1768 compactlogix l4x controller	model:	-	scope:	eq	version:	16.00	Trust: 0.2
vendor:	1768 compactlogix l4x controller	model:	-	scope:	eq	version:	16.020	Trust: 0.2
vendor:	1768 compactlogix l4x controller	model:	-	scope:	eq	version:	16.025	Trust: 0.2
vendor:	1768 compactlogix l4x controller	model:	-	scope:	eq	version:	17.00	Trust: 0.2
vendor:	1768 compactlogix l4x controller	model:	-	scope:	eq	version:	18.00	Trust: 0.2
vendor:	1768 compactlogix l4x controller	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	1768 compactlogix l4x controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	1768 compactlogix l4x controller	model:	-	scope:	eq	version:	20.011	Trust: 0.2
vendor:	1768 compactlogix l4x controller	model:	-	scope:	eq	version:	20.016	Trust: 0.2
vendor:	1768 compact guardlogix l4xs controller	model:	-	scope:	eq	version:	18.00	Trust: 0.2
vendor:	1768 compact guardlogix l4xs controller	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	1768 compact guardlogix l4xs controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	1768 compact guardlogix l4xs controller	model:	-	scope:	eq	version:	20.011	Trust: 0.2
vendor:	1768 compact guardlogix l4xs controller	model:	-	scope:	eq	version:	20.013	Trust: 0.2
vendor:	rslogix emulate 5000	model:	-	scope:	eq	version:	18.00	Trust: 0.2
vendor:	rslogix emulate 5000	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	rslogix emulate 5000	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	rslogix emulate 5000	model:	-	scope:	eq	version:	21.00	Trust: 0.2
vendor:	guardlogix 5570 controller	model:	-	scope:	eq	version:	16.00	Trust: 0.2
vendor:	guardlogix 5570 controller	model:	-	scope:	eq	version:	17.00	Trust: 0.2
vendor:	guardlogix 5570 controller	model:	-	scope:	eq	version:	18.00	Trust: 0.2
vendor:	guardlogix 5570 controller	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	guardlogix 5570 controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	guardlogix 5570 controller	model:	-	scope:	eq	version:	20.010	Trust: 0.2
vendor:	guardlogix 5570 controller	model:	-	scope:	eq	version:	20.017	Trust: 0.2
vendor:	guardlogix 5570 controller	model:	-	scope:	eq	version:	21.00	Trust: 0.2
vendor:	flexlogix l34 controller	model:	-	scope:	eq	version:	16.00	Trust: 0.2
vendor:	controllogix l55 controller	model:	-	scope:	eq	version:	16.00	Trust: 0.2
vendor:	controllogix l55 controller	model:	-	scope:	eq	version:	16.020	Trust: 0.2
vendor:	controllogix l55 controller	model:	-	scope:	eq	version:	16.022	Trust: 0.2
vendor:	controllogix 5570 redundant controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	controllogix 5570 redundant controller	model:	-	scope:	eq	version:	20.050	Trust: 0.2
vendor:	controllogix 5570 redundant controller	model:	-	scope:	eq	version:	20.055	Trust: 0.2
vendor:	controllogix 5570 redundant controller	model:	-	scope:	eq	version:	21.00	Trust: 0.2
vendor:	controllogix 5570 controller	model:	-	scope:	eq	version:	18.00	Trust: 0.2
vendor:	controllogix 5570 controller	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	controllogix 5570 controller	model:	-	scope:	eq	version:	20.010	Trust: 0.2
vendor:	controllogix 5570 controller	model:	-	scope:	eq	version:	20.013	Trust: 0.2
vendor:	controllogix 5570 controller	model:	-	scope:	eq	version:	21.00	Trust: 0.2
vendor:	controllogix 5560 redundant controller	model:	-	scope:	eq	version:	16.00	Trust: 0.2
vendor:	controllogix 5560 redundant controller	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	controllogix 5560 redundant controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	controllogix 5560 redundant controller	model:	-	scope:	eq	version:	20.050	Trust: 0.2
vendor:	controllogix 5560 redundant controller	model:	-	scope:	eq	version:	20.055	Trust: 0.2
vendor:	controllogix 5560 controller	model:	-	scope:	eq	version:	16.00	Trust: 0.2
vendor:	controllogix 5560 controller	model:	-	scope:	eq	version:	16.020	Trust: 0.2
vendor:	controllogix 5560 controller	model:	-	scope:	eq	version:	16.022	Trust: 0.2
vendor:	controllogix 5560 controller	model:	-	scope:	eq	version:	17.00	Trust: 0.2
vendor:	controllogix 5560 controller	model:	-	scope:	eq	version:	18.00	Trust: 0.2
vendor:	controllogix 5560 controller	model:	-	scope:	eq	version:	19.00	Trust: 0.2
vendor:	controllogix 5560 controller	model:	-	scope:	eq	version:	20.00	Trust: 0.2
vendor:	controllogix 5560 controller	model:	-	scope:	eq	version:	20.010	Trust: 0.2
vendor:	controllogix 5560 controller	model:	-	scope:	eq	version:	20.013	Trust: 0.2

sources: IVD: a08db64d-d93e-49ce-82e1-7dccacb3db82 // CNVD: CNVD-2017-00316 // BID: 95304 // JVNDB: JVNDB-2016-008010 // CNNVD: CNNVD-201701-155 // NVD: CVE-2016-9343

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-9343
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2016-9343
value:	CRITICAL
Trust: 0.8
CNVD:	CNVD-2017-00316
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201701-155
value:	CRITICAL
Trust: 0.6
IVD:	a08db64d-d93e-49ce-82e1-7dccacb3db82
value:	HIGH
Trust: 0.2
VULHUB:	VHN-98163
value:	HIGH
Trust: 0.1
VULMON:	CVE-2016-9343
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2016-9343
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
CNVD:	CNVD-2017-00316
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	a08db64d-d93e-49ce-82e1-7dccacb3db82
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-98163
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-9343
baseSeverity:	CRITICAL
baseScore:	10.0
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	6.0
version:	3.1
Trust: 1.0
NVD:	CVE-2016-9343
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: a08db64d-d93e-49ce-82e1-7dccacb3db82 // CNVD: CNVD-2017-00316 // VULHUB: VHN-98163 // VULMON: CVE-2016-9343 // JVNDB: JVNDB-2016-008010 // CNNVD: CNNVD-201701-155 // NVD: CVE-2016-9343

PROBLEMTYPE DATA

problemtype:	CWE-787	Trust: 1.0
problemtype:	CWE-119	Trust: 0.9

sources: VULHUB: VHN-98163 // JVNDB: JVNDB-2016-008010 // NVD: CVE-2016-9343

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201701-155

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201701-155

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-008010

PATCH

title:	Top Page	url:	http://www.rockwellautomation.com/	Trust: 0.8
title:	Patch for RockwellAutomationLogix5000Controllers Stack Buffer Overflow Vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/87785	Trust: 0.6
title:	Rockwell Automation Logix5000 Controller Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=66881	Trust: 0.6

sources: CNVD: CNVD-2017-00316 // JVNDB: JVNDB-2016-008010 // CNNVD: CNNVD-201701-155

EXTERNAL IDS

db:	NVD	id:	CVE-2016-9343	Trust: 3.7
db:	BID	id:	95304	Trust: 3.5
db:	ICS CERT	id:	ICSA-16-343-05	Trust: 2.9
db:	CNNVD	id:	CNNVD-201701-155	Trust: 0.9
db:	CNVD	id:	CNVD-2017-00316	Trust: 0.8
db:	JVNDB	id:	JVNDB-2016-008010	Trust: 0.8
db:	IVD	id:	A08DB64D-D93E-49CE-82E1-7DCCACB3DB82	Trust: 0.2
db:	VULHUB	id:	VHN-98163	Trust: 0.1
db:	VULMON	id:	CVE-2016-9343	Trust: 0.1

sources: IVD: a08db64d-d93e-49ce-82e1-7dccacb3db82 // CNVD: CNVD-2017-00316 // VULHUB: VHN-98163 // VULMON: CVE-2016-9343 // BID: 95304 // JVNDB: JVNDB-2016-008010 // CNNVD: CNNVD-201701-155 // NVD: CVE-2016-9343

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-16-343-05	Trust: 2.9
url:	http://www.securityfocus.com/bid/95304	Trust: 2.4
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-9343	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2016-9343	Trust: 0.8
url:	http://www.securityfocus.com/bid/95304/info	Trust: 0.8
url:	http://www.rockwellautomation.com/	Trust: 0.3
url:	https://cwe.mitre.org/data/definitions/787.html	Trust: 0.1
url:	https://tools.cisco.com/security/center/viewalert.x?alertid=52266	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: CNVD: CNVD-2017-00316 // VULHUB: VHN-98163 // VULMON: CVE-2016-9343 // BID: 95304 // JVNDB: JVNDB-2016-008010 // CNNVD: CNNVD-201701-155 // NVD: CVE-2016-9343

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 95304

SOURCES

db:	IVD	id:	a08db64d-d93e-49ce-82e1-7dccacb3db82
db:	CNVD	id:	CNVD-2017-00316
db:	VULHUB	id:	VHN-98163
db:	VULMON	id:	CVE-2016-9343
db:	BID	id:	95304
db:	JVNDB	id:	JVNDB-2016-008010
db:	CNNVD	id:	CNNVD-201701-155
db:	NVD	id:	CVE-2016-9343

LAST UPDATE DATE

2025-04-20T23:16:19.845000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2017-00316	date:	2017-01-11T00:00:00
db:	VULHUB	id:	VHN-98163	date:	2017-06-28T00:00:00
db:	VULMON	id:	CVE-2016-9343	date:	2022-02-03T00:00:00
db:	BID	id:	95304	date:	2017-01-12T01:10:00
db:	JVNDB	id:	JVNDB-2016-008010	date:	2017-04-07T00:00:00
db:	CNNVD	id:	CNNVD-201701-155	date:	2022-02-07T00:00:00
db:	NVD	id:	CVE-2016-9343	date:	2025-04-20T01:37:25.860

SOURCES RELEASE DATE

db:	IVD	id:	a08db64d-d93e-49ce-82e1-7dccacb3db82	date:	2017-01-11T00:00:00
db:	CNVD	id:	CNVD-2017-00316	date:	2017-01-11T00:00:00
db:	VULHUB	id:	VHN-98163	date:	2017-02-13T00:00:00
db:	VULMON	id:	CVE-2016-9343	date:	2017-02-13T00:00:00
db:	BID	id:	95304	date:	2017-01-05T00:00:00
db:	JVNDB	id:	JVNDB-2016-008010	date:	2017-04-07T00:00:00
db:	CNNVD	id:	CNNVD-201701-155	date:	2017-01-09T00:00:00
db:	NVD	id:	CVE-2016-9343	date:	2017-02-13T21:59:01.707