CVE-2016-9343
CriticalSummary
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller versions FRN 16.00 through 21.00 related to the processing of malformed CIP packets. An attacker may exploit this vulnerability to overflow a stack-based buffer, potentially allowing code execution on the controller or causing a fault that results in a denial of service.
Risk Assessment
This vulnerability could lead to remote code execution or system failure, resulting in disruptions to industrial processes and significant financial repercussions for the organization.
Recommendation
It is recommended to update the controller firmware to the latest version to mitigate this vulnerability and to monitor network traffic for suspicious CIP packets.
Original NVD description (English source)
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.