{
    "id": "CVE-2016-9343",
    "published": "2017-02-13 21:59:01",
    "last_modified": "2026-06-17 00:55:51",
    "cvss_score": "10.0",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
    "cwe": "CWE-787",
    "description": "An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service.",
    "epss_score": "0.10494",
    "epss_percentile": "0.95635",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-03 18:17:17",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "EPSS 10.5% — above the 10% action threshold."
    },
    "products": [
        {
            "vendor": "rockwellautomation",
            "product": "1768_compact_guardlogix_l4xs_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1768_compact_guardlogix_l4xs_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1768_compactlogix_l4x_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1768_compactlogix_l4x_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_5370_l1_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_5370_l1_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_5370_l2_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_5370_l2_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_5370_l3_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_5370_l3_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_l23x_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_l23x_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_l3x_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "1769_compactlogix_l3x_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_5560_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_5560_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_5560_redundant_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_5560_redundant_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_5570_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_5570_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_5570_redundant_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_5570_redundant_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_l55_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "controllogix_l55_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "flexlogix_l34_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "flexlogix_l34_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "guardlogix_5570_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "guardlogix_5570_controller_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "rslogix_emulate_5000"
        },
        {
            "vendor": "rockwellautomation",
            "product": "rslogix_emulate_5000_firmware"
        },
        {
            "vendor": "rockwellautomation",
            "product": "softlogix_5800_controller"
        },
        {
            "vendor": "rockwellautomation",
            "product": "softlogix_5800_controller_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "http://www.securityfocus.com/bid/95304",
        "https://ics-cert.us-cert.gov/advisories/ICSA-16-343-05",
        "http://www.securityfocus.com/bid/95304",
        "https://ics-cert.us-cert.gov/advisories/ICSA-16-343-05"
    ]
}