CVE-2016-9343: Rockwellautomation 1768 Compact Guardlogix l4xs Controller Firmware

Critical severity, CVSS 10.0. EPSS: 10.5% chance of exploitation in the next 30 days.

An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.

Affected products

  • Rockwellautomation 1768 Compact Guardlogix l4xs Controller Firmware: version 18.00 only; version 19.00 only; version 20.00 only; version 20.011 only; version 20.013 only
  • Rockwellautomation 1768 Compactlogix l4x Controller Firmware: version 16.00 only; version 16.020 only; version 16.025 only; version 17.00 only; version 18.00 only; version 19.00 only; …
  • Rockwellautomation 1769 Compactlogix 5370 l1 Controller Firmware: version 20.00 only; version 20.010 only; version 20.013 only; version 21.00 only
  • Rockwellautomation 1769 Compactlogix 5370 l2 Controller Firmware: version 20.00 only; version 20.010 only; version 20.013 only; version 21.00 only
  • Rockwellautomation 1769 Compactlogix 5370 l3 Controller Firmware: version 20.00 only; version 20.010 only; version 20.013 only; version 21.00 only
  • Rockwellautomation 1769 Compactlogix l23x Controller Firmware: version 16.00 only; version 17.00 only; version 18.00 only; version 19.00 only; version 20.00 only; version 20.010 only; …
  • Rockwellautomation 1769 Compactlogix l3x Controller Firmware: version 16.00 only; version 16.020 only; version 16.023 only; version 17.00 only; version 18.00 only; version 19.00 only; …
  • Rockwellautomation Controllogix 5560 Controller Firmware: version 16.00 only; version 16.020 only; version 16.022 only; version 17.00 only; version 18.00 only; version 19.00 only; …
  • Rockwellautomation Controllogix 5560 Redundant Controller Firmware: version 16.00 only; version 19.00 only; version 20.00 only; version 20.050 only; version 20.055 only
  • Rockwellautomation Controllogix 5570 Controller Firmware: version 18.00 only; version 19.00 only; version 20.010 only; version 20.013 only; version 21.00 only
  • Rockwellautomation Controllogix 5570 Redundant Controller Firmware: version 20.00 only; version 20.050 only; version 20.055 only; version 21.00 only
  • Rockwellautomation Controllogix l55 Controller Firmware: version 16.00 only; version 16.020 only; version 16.022 only
  • Rockwellautomation Flexlogix l34 Controller Firmware: version 16.00 only
  • Rockwellautomation Guardlogix 5570 Controller Firmware: version 16.00 only; version 17.00 only; version 18.00 only; version 19.00 only; version 20.00 only; version 20.010 only; …
  • Rockwellautomation Rslogix Emulate 5000 Firmware: version 18.00 only; version 19.00 only; version 20.00 only; version 21.00 only
  • Rockwellautomation Softlogix 5800 Controller Firmware: version 18.00 only; version 19.00 only; version 20.00 only; version 21.00 only

Published 2017-02-13. Last modified 2026-06-17.