CVE-2018-19282

Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Industrial Protocol (CIP) network stack. The vulnerability allows the attacker to crash the CIP in a way that it does not accept new connections, but keeps the current connections active, which can prevent legitimate users from recovering control.

• CWE-400

• https://applied-risk.com/application/files/4215/5385/2294/Advisory_AR2019004_Rockwell_Powerflex_525_Denial_of_Service.pdfThird Party Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-19-087-01Third Party Advisory, US Government Resource
• https://applied-risk.com/application/files/4215/5385/2294/Advisory_AR2019004_Rockwell_Powerflex_525_Denial_of_Service.pdfThird Party Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-19-087-01Third Party Advisory, US Government Resource

Published

Apr 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19277securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 all…8.8
• CVE-2018-19278Buffer overflow in DNS SRV and NAPTR lookups in Digium Aster…
• CVE-2018-19279PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks…
• CVE-2018-1928IBM StoredIQ 7.6.0 does not implement proper authorization o…6.7
• CVE-2018-19280Centreon 3.4.x (fixed in Centreon 18.10.0) has XSS via the r…
• CVE-2018-19281Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2…
• CVE-2018-19284Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-19286The server in mubu note 2018-11-11 has XSS by configuring an…6.1
• CVE-2018-19287XSS in the Ninja Forms plugin before 3.3.18 for WordPress al…
• CVE-2018-19288Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS…
• CVE-2018-19289An issue was discovered in Valine v1.3.3. It allows HTML inj…6.1
• CVE-2018-1929IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6…4.3