Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.

A stack-based buffer oveflow vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code (CVE-2018-14829).
 - A heap-based buffer overflow vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to Port 44818, causing the RSLinx Classic application to terminate. The user will need to manually restart the software to regain functionality. (CVE-2018-14821)
 - A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionality. (CVE-2018-14827)

The RSLinx Classic running on the remote host is affected by a remote code execution vulnerability due to a stack buffer overflow condition when handling an EtherNet/IP message received on TCP port 44818. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to execute arbitrary code.

Note that RSLinx Classic is reportedly affected by additional vulnerabilities; however, this plugin has not tested for these.

The remote host has a version of RSLinx Classic installed that is v4.00.01 or prior. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
720266	Rockwell Automation RSLinx Classic <= 4.00.01 Multiple Vulnerabilities (ICSA-18-263-02)	Nessus Network Monitor	SCADA	critical
119265	Rockwell Automation RSLinx Classic ENGINE.dll Stack Buffer Overflow	Nessus	SCADA	critical
117671	Rockwell Automation RSLinx Classic <= 4.00.01 Multiple Vulnerabilities	Nessus	SCADA	critical
720184	Rockwell Automation RSLinx Classic <= 4.00.01 Malformed CIP Packet Triggered Buffer Overflow (deprecated)	Nessus Network Monitor	SCADA	critical

Detections

Analytics

CVE-2018-14829

critical

Tenable Plugins

critical

critical

critical

critical