| ID | CVE-2019-10970 |
| Summary | In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system. |
| References | |
| Vulnerable Configurations | |
| CVSS | | Base: | 10.0 (as of 01-10-2020 – 16:43) | | Impact: | | | Exploitability: | |
|
| CWE | NVD-CWE-Other |
| CAPEC | |
| Access | | Vector | Complexity | Authentication | | NETWORK | LOW | NONE |
|
| Impact | | Confidentiality | Integrity | Availability | | COMPLETE | COMPLETE | COMPLETE |
|
| cvss-vector via4 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| refmap via4 | |
| Last major update | 01-10-2020 – 16:43 |
| Published | 11-07-2019 – 20:15 |
| Last modified | 01-10-2020 – 16:43 |