An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.

An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Severity
500092	Rockwell Automation Logix5000 Programmable Automation Controller Buffer Overflow (CVE-2016-9343)	Tenable OT Security	Tenable.ot	critical
720214	Rockwell Automation/Allen-Bradley Ethernet/IP Products Buffer Overflow Denial of Service	Nessus Network Monitor	SCADA	critical

Detections

Analytics

CVE-2016-9343

critical

Tenable Plugins

critical

critical