Cyber Resilience

CVE-2019-6553

Memory Safety in Rockwellautomation Rslinx ≤ 4.10.00

High EPSSMemory Safety
Published
04 April 2019
Modified
21 November 2024
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.50 99th percentile
Risk Priority 83 floored blend · peak EPSS

Summary

CVE-2019-6553 is a critical-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Rockwellautomation Rslinx. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer,…

more

allowing an attacker to exploit a stack-based buffer overflow condition.

CWE(s)

Related Threats

Likely ATT&CK TechniquesAI

Techniques this vulnerability likely enables, inferred from its description, weakness type, and attributed-actor tradecraft. Confidence is per-technique.

T1190 Exploit Public-Facing Application Initial Accessconfidence: HIGH
Stack buffer overflow in a network service (Forward Open request) directly enables remote exploitation of a public-facing application.
T1068 Exploitation for Privilege Escalation Privilege Escalationconfidence: HIGH
Buffer overflow in a privileged service can be leveraged for local privilege escalation.
T1055 Process Injection Stealthconfidence: MEDIUM
Successful exploitation typically results in arbitrary code execution via process memory corruption.
inferred from description + CWE · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2023-2262Same vendor: Rockwellautomation
CVE-2023-3595Same vendor: Rockwellautomation
CVE-2023-29462Same vendor: Rockwellautomation
CVE-2023-3596Same vendor: Rockwellautomation
CVE-2025-7032Same vendor: Rockwellautomation
CVE-2025-11918Same vendor: Rockwellautomation
CVE-2023-29464Same vendor: Rockwellautomation
CVE-2023-2072Same vendor: Rockwellautomation
CVE-2018-0172Same vendor: Rockwellautomation
CVE-2020-37119Shared CWE-121, CWE-787

Affected Assets

rockwellautomation
rslinx
≤ 4.10.00

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)
  • 2 hardening rules · 2 OS baselines
Validate
Prove the fix (OWASP ASVS)

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-787

Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure-development practices directly prevent introduction of stack buffer overflows.

ID.RA-01 partial match
prevents

Vulnerability scanning can discover stack buffer overflows but does not prevent their introduction.

PR.PS-02 partial match
prevents

Patching eliminates known instances of the weakness after discovery.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing (fuzzing, static analysis) detects stack overflows before release.

prevents

Secure SDLC mandates buffer-safety practices that directly prevent stack overflows.

prevents

Application security requirements can specify buffer-size and input-validation rules.

prevents

Secure architecture principles include memory-safety and least-privilege stack usage.

prevents

Secure coding standards explicitly forbid unsafe buffer handling that causes CWE-121.

prevents

Change management can enforce review gates that catch unsafe memory operations before deployment.

References