“Port 44818 is needed only when a user wants to utilize unsolicited messages. The advisories highlight how the buffer overflow flaw could also be avoided by disabling the target port. Rockwell Automation, as well as ICS-CERT have released security advisories emphasizing the severity of the flaw. Upon notice, Rockwell Automation has released patches for the affected versions: v3.60, v3.70, v3.80, v3.81, v3.90, v4.00.01, v4.10.The vulnerability was rated with a CVSS v3 score of 10.0 which indicates how ciritical it was.Affected products include RSLinx Classic v4.10.00 and older versions.The vulnerability designated as CVE-2019-6553 could have led to denial-of-service attacks and subsequently allowed remote code execution (RCE).According to Tenable, the buffer overflow vulnerability existed in an Engine.dll file where an attacker could specify malicious instances in TCP port 44818.This could have allowed a remote attacker to execute arbitrary code on the automation device. Researchers at Tenable had earlier found that RSLinx Classic contained a stack buffer overflow flaw due to a DLL file used by the software. The software helps configure and communicate with industrial automation devices and networks.

Rockwell Automation, one of the top industrial automation companies in the world, patched a major security vulnerability in its popular software package RSLinx Classic.

A buffer overflow vulnerability existing in one of the software could have led to denial-of-service attacks as well as allowed remote code execution (RCE).

RSLinx Classic is a communication software package meant for managing industrial automation applications and devices.

Rslinx classic versions