CVE-2018-14829 - AskarLabs CVE Database

CVE-2018-14829

Vendor Rockwell Automation

Product RSLinx Classic

Weakness CWE-121

Published September 20, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.

Key dates

02Disclosure timeline

September 20, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-14829 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/121.html

Related vulnerabilities

04Related CVE

CVE-2022-20707 Cisco Small Business RV Series Routers Vulnerabilities CVE-2024-20518 Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities CVE-2023-51631 D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2020-4044 Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it CVE-2025-0566 Tenda AC15 SetDevNetName formSetDevNetName stack-based overflow