Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2019-10955

Open redirect in Rockwell Automation MicroLogix 1400 Controllers and others

CVSS 6.1 MediumEPSS 0.030 · 87th percentile

Published by the CVE Program (CNA: icscert) at 25 Apr 2019, 17:27 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Rockwell Automation MicroLogix 1400 Controllers
  • affected Series A
  • affected All Versions Series B
  • affected v15.002 and earlier
Rockwell Automation MicroLogix 1100 Controllers
  • affected v14.00 and earlier
Rockwell Automation CompactLogix 5370 L1 controllers
  • affected v30.014 and earlier
Rockwell Automation CompactLogix 5370 L2 controllers
  • affected v30.014 and earlier
Rockwell Automation CompactLogix 5370 L3 controllers
  • affected v30.014 and earlier
Identifiers
CVE-2019-10955
CNA
icscert
Weakness (CWE)
CWE-601
Tags
Published
25 Apr 2019
Updated
3 Jun 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
6.1 Medium 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N ADP (CISA-ADP)
  • CISA KEV Not listed.
  • EPSS 0.030, the 87th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Apr 2019. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.