CVE-2019-10952

CVE-2019-10952 is a critical stack-based buffer overflow vulnerability affecting Rockwell Automation CompactLogix 5370 L1, L2, L3, Compact GuardLogix 5370, and Armor Compact GuardLogix 5370 controllers running firmware versions 20-30 and earlier. An unauthenticated attacker can exploit this flaw by sending a crafted HTTP/HTTPS request, leading to a denial-of-service (DoS) condition requiring a cold restart, or potentially remote code execution. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, resulting in high impacts to confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability has received limited community discussion and media coverage, indicating a lower but still present risk.