Read the docs
TI-2019-08173 Aliases CVE-2019-10954GHSA-w6v6-c9pm-2p53

Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow

Priority MEDIUM 42CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.

Why it matters now

EPSS 0.06104 93rd percentileScored 2026-11-07
Fix Fixed CompactLogix 5370 L1 controllers (Rockwell Automation): 20 - 30CompactLogix 5370 L2 controllers (Rockwell Automation): 20 - 30+3 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellCompactLogix 5370 L1 controllersbefore 20 - 3020 - 30Patch availableCNA
RockwellCompactLogix 5370 L2 controllersbefore 20 - 3020 - 30Patch availableCNA
RockwellCompactLogix 5370 L3 controllersbefore 20 - 3020 - 30Patch availableCNA
RockwellCompact GuardLogix 5370 controllersbefore 20 - 3020 - 30Patch availableCNA
RockwellArmor Compact GuardLogix 5370 controllersbefore 20 - 3020 - 30Patch availableCNA
  • CompactLogix 5370 L1 controllers VendorRockwell Affected before 20 - 30 Fixed in 20 - 30 Patch available CNA
  • CompactLogix 5370 L2 controllers VendorRockwell Affected before 20 - 30 Fixed in 20 - 30 Patch available CNA
  • CompactLogix 5370 L3 controllers VendorRockwell Affected before 20 - 30 Fixed in 20 - 30 Patch available CNA
  • Compact GuardLogix 5370 controllers VendorRockwell Affected before 20 - 30 Fixed in 20 - 30 Patch available CNA
  • Armor Compact GuardLogix 5370 controllers VendorRockwell Affected before 20 - 30 Fixed in 20 - 30 Patch available CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:o:rockwellautomation:compactlogix_5370_l1_firmware:*:*:*:*:*:*:*:*20.011 – 30.014VulnerableRockwell
cpe:2.3:h:rockwellautomation:compactlogix_5370_l1:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:compactlogix_5370_l2_firmware:*:*:*:*:*:*:*:*20.011 – 30.014VulnerableRockwell
cpe:2.3:h:rockwellautomation:compactlogix_5370_l2:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:compactlogix_5370_l3_firmware:*:*:*:*:*:*:*:*20.011 – 30.014VulnerableRockwell
cpe:2.3:h:rockwellautomation:compactlogix_5370_l3:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:compact_guardlogix_5370_firmware:*:*:*:*:*:*:*:*20.011 – 30.014VulnerableRockwell
cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:armor_compact_guardlogix_5370_firmware:*:*:*:*:*:*:*:*20.011 – 30.014VulnerableRockwell
cpe:2.3:h:rockwellautomation:armor_compact_guardlogix_5370:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
  • cpe:2.3:o:rockwellautomation:compactlogix_5370_l1_firmware:*:*:*:*:*:*:*:* Versions 20.011 – 30.014 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compactlogix_5370_l1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:compactlogix_5370_l2_firmware:*:*:*:*:*:*:*:* Versions 20.011 – 30.014 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compactlogix_5370_l2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:compactlogix_5370_l3_firmware:*:*:*:*:*:*:*:* Versions 20.011 – 30.014 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compactlogix_5370_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:compact_guardlogix_5370_firmware:*:*:*:*:*:*:*:* Versions 20.011 – 30.014 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:armor_compact_guardlogix_5370_firmware:*:*:*:*:*:*:*:* Versions 20.011 – 30.014 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:armor_compact_guardlogix_5370:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell

Remediation

  • Fix · CNA CompactLogix 5370 L1 controllers (Rockwell Automation) Fixed in 20 - 30
  • Fix · CNA CompactLogix 5370 L2 controllers (Rockwell Automation) Fixed in 20 - 30
  • Fix · CNA CompactLogix 5370 L3 controllers (Rockwell Automation) Fixed in 20 - 30
  • Fix · CNA Compact GuardLogix 5370 controllers (Rockwell Automation) Fixed in 20 - 30
  • Fix · CNA Armor Compact GuardLogix 5370 controllers (Rockwell Automation) Fixed in 20 - 30

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Rockwell Automation Armor Compact GuardLogix 5370 controllers, Compact GuardLogix 5370 controllers and 3 more products 20 - 30

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2019-08171 Rockwell Automation CompactLogix 5370 Uncontrolled Resource ConsumptionPriority MEDIUM 54
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-10954
  2. 2026-10-03 Alias added: GHSA-w6v6-c9pm-2p53

References

Advisory 1

Other 1

  • TI-2019-08171 Rockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption CVSS 3.1CRITICAL 9.8
  • TI-2020-05646 Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation CVSS 3.1HIGH 8.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences