ByteOS Network

NVD Vulnerability Details :

CVE-2019-10970

Analyzed

Source-ics-cert@hq.dhs.gov

Published At-11 Jul, 2019 | 20:15

Updated At-01 Oct, 2020 | 16:43

In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Rockwell Automation, Inc.

>>panelview_5510_firmware>>Versions before 4.003(exclusive)

cpe:2.3:o:rockwellautomation:panelview_5510_firmware:*:*:*:*:*:*:*:*

Rockwell Automation, Inc.

>>panelview_5510_firmware>>Versions from 5.000(inclusive) to 5.002(exclusive)

cpe:2.3:o:rockwellautomation:panelview_5510_firmware:*:*:*:*:*:*:*:*

Rockwell Automation, Inc.

>>panelview_5510>>-

cpe:2.3:h:rockwellautomation:panelview_5510:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov
CWE-284	Secondary	ics-cert@hq.dhs.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/109105	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry
https://www.us-cert.gov/ics/advisories/icsa-19-190-02	ics-cert@hq.dhs.gov	Mitigation Third Party Advisory US Government Resource

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History