Rockwellautomation Armor Compact Guardlogix 5370 Firmware vulnerabilities

3 CVEs affecting Rockwellautomation Armor Compact Guardlogix 5370 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-6998, published 2022-07-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10952, published 2019-05-01. Critical severity, CVSS 9.8. EPSS: 10% chance of exploitation in the next 30 days. An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is…
CVE-2019-10954, published 2019-05-01. High severity, CVSS 7.5. EPSS: 6.1% chance of exploitation in the next 30 days. An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3…
CVE-2020-6998, published 2022-07-27. High severity, CVSS 8.6. EPSS: 3.2% chance of exploitation in the next 30 days. The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution,…