Rockwellautomation Compactlogix 5370 L1 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Rockwellautomation Compactlogix 5370 L1 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-1161 — CVSS 10.0 (critical): An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix…
• CVE-2019-10952 — CVSS 9.8 (critical): An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a…
• CVE-2019-10954 — CVSS 7.5 (high): An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable…
• CVE-2019-10955 — CVSS 6.1 (medium): In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00…
• CVE-2020-6998 — CVSS 5.8 (medium): The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not…