CVE-2016-5814

Severity: high (CVSS 8.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-19 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file.

Affected products

Rockwellautomation Rslogix 500 Professional Edition: all versions
Rockwellautomation Rslogix 500 Standard Edition: all versions
Rockwellautomation Rslogix 500 Starter Edition: all versions
Rockwellautomation Rslogix Micro Developer: all versions
Rockwellautomation Rslogix Micro Starter Lite: all versions

References

http://www.securityfocus.com/bid/92983
https://ics-cert.us-cert.gov/advisories/ICSA-16-224-02
http://www.securityfocus.com/bid/92983
https://ics-cert.us-cert.gov/advisories/ICSA-16-224-02

Get alerted when CVE-2016-5814 or the next vulnerability affects your stack