CVE-2019-10970
Critical
Description
In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system.
SeverityCritical
CVSS9.8
Exploit probability—
ProductRockwellautomation Panelview 5510 Firmware
PublishedJul 11, 2019
First seenJul 11, 2019
Weakness typeCWE-284Improper access control
How to fix
Update
- rockwellautomation panelview_5510_firmware4.003, 5.002 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation panelview_5510_firmware | v < 4.003, 5.000 ≤ v < 5.002 | 4.003, 5.002 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.