CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. Its EPSS score suggests a 10.5% probability of exploitation in the next 30 days. It may lead to a denial-of-service condition.
CVE
CVE-2016-9343
Severity
CRITICAL
CVSS
10
EPSS
10.49%
Original NVD Description
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.