2019-01-22 15:05:16 -05:00
{
2019-04-04 19:00:46 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
2019-03-18 06:58:40 +00:00
"CVE_data_meta" : {
"ID" : "CVE-2019-6553" ,
2019-04-04 19:00:46 +00:00
"ASSIGNER" : "ics-cert@hq.dhs.gov" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Rockwell Automation" ,
"product" : {
"product_data" : [
{
"product_name" : "RSLinx Classic" ,
"version" : {
"version_data" : [
{
"version_value" : "4.10.00 and prior"
}
]
}
}
]
}
}
]
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "STACK-BASED BUFFER OVERFLOW CWE-121"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"refsource" : "MISC" ,
"name" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-064-01" ,
"url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-064-01"
}
]
2019-03-18 06:58:40 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2019-04-04 19:00:46 +00:00
"value" : "A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow condition."
2019-03-18 06:58:40 +00:00
}
]
}
}