Rockwellautomation Rslogix vulnerabilities

2 CVEs affecting Rockwellautomation Rslogix, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-5305, published 2019-03-26.

More from Rockwellautomation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-3489, published 2011-09-16. Medium severity, CVSS 5.0. EPSS: 8.7% chance of exploitation in the next 30 days. RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446…
• CVE-2010-5305, published 2019-03-26. Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days. The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an…