CVE-2018-14829

9.8 criticalEPSS 16%

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-121
Published: 2018-09-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rockwellautomation:rslinx

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02
https://www.tenable.com/security/research/tra-2018-26
https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02
https://www.tenable.com/security/research/tra-2018-26

Check your stack JSON