VULNERABILITY INTELLIGENCE
CVE-2016-5814
CVSS score8.6 HIGH
EPSS probability4.67%
CISA KEVNot currently listed
Published2016-09-19
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Description
Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov — Mitigation, Patch, Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Third Party Advisory, US Government Resource