CVE-2019-10970 - In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system

Back Back to CVE browser

CRITICAL

In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system

Published Jul 11, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 4.60%

Description

In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system.

Affected products

Vendor n/a Product Rockwell Automation PanelView 5510 Default
n/a
- Version
  all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Rockwell Automation PanelView 5510

n/a

Version	Status	Constraints
all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (3)

http://www.securityfocus.com/bid/109105
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2684
Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-190-02
x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/109105		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2684		Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-190-02		x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource