Vulnerability record · CVE-2018-14829 · published 20 September 2018
CVE-2018-14829: Rockwellautomation rslinx stack-based buffer overflow vulnerability
Rockwellautomation · Rslinx
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.
Description
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02 | Third Party AdvisoryUS Government Resource |
| https://www.tenable.com/security/research/tra-2018-26 | ExploitThird Party Advisory |
| https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02 | Third Party AdvisoryUS Government Resource |
| https://www.tenable.com/security/research/tra-2018-26 | ExploitThird Party Advisory |
Track CVE-2018-14829 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2018-14829), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.