PT-2019-12101 · Rockwell Automation · Armor Compact Guardlogix 5370+2

George Lashenko · Published 2019-05-01 · Updated 2026-02-20 · CVE-2019-10954

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions CompactLogix 5370 L1, L2, and L3 Controllers versions 20 through 30 Compact GuardLogix 5370 controllers versions 20 through 30 Armor Compact GuardLogix 5370 Controllers versions 20 through 30

Description An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state. This issue affects CompactLogix 5370 and Compact GuardLogix 5370 controllers.

Recommendations For versions 20 through 30 of CompactLogix 5370 L1, L2, and L3 Controllers, consider disabling the SMTP functionality until a patch is available. For versions 20 through 30 of Compact GuardLogix 5370 controllers, restrict access to the SMTP service to minimize the risk of exploitation. For versions 20 through 30 of Armor Compact GuardLogix 5370 Controllers, avoid using the affected controllers in production environments until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

CVE-2019-10954

Affected Products

Armor Compact Guardlogix 5370

Compact Guardlogix 5370

Compactlogix 5370

References · 7

• https://osv.dev/vulnerability/CVE-2019-10954 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10954 · Security Note
• https://t.me/cveNotify/152636 · Telegram Post
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1075979 · Note
• http://securityfocus.com/bid/108118 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-120-01 · Note
• https://t.me/cvenotify/22562 · Telegram Post