Known vulnerabilities in RSLinx Classic

Vendor: Rockwell Automation
Software: RSLinx Classic
Software CPE: cpe:2.3:a:rockwell_automation:rslinx_classic:*:*:*:*:*:*:*:*
Website: https://www.rockwellautomation.com/
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RSLinx Classic RSLinx Classic is affected by 9 known vulnerabilities: 6 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49358 - Use of Out-of-range Pointer Offset
CVE-2020-13573		 CWE-823 Medium
No
No
 - 07.01.2021 SB2021011101
#VU28999 - Incorrect Permission Assignment for Critical Resource
CVE-2020-10642		 CWE-732 Low
No
No
 - 12.06.2020 SB2020041302
#VU28998 - Unrestricted Upload of File with Dangerous Type
CVE-2020-12005		 CWE-434 Medium
No
No
 - 12.06.2020 SB2020061204
#VU28997 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-12003		 CWE-22 Medium
No
No
 - 12.06.2020 SB2020061204
#VU28996 - Improper input validation
CVE-2020-12001		 CWE-20 Medium
No
No
 - 12.06.2020 SB2020061204
#VU28995 - Improper input validation
CVE-2020-11999		 CWE-20 Medium
No
No
 - 12.06.2020 SB2020061204
#VU28131 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-12034		 CWE-89 Low
No
No
 - 20.05.2020 SB2020052025
#VU28130 - Memory corruption
CVE-2020-12038		 CWE-119 Medium
No
No
 - 20.05.2020 SB2020052025
#VU13233 - Uncontrolled Search Path Element
CVE-2018-10619		 CWE-427 Low
Available
No
 - 07.06.2018 SB2018060801
SB2018091401
SB2018103031