Skip to content
Fencer Intel
high 7.8

CVE-2018-10619 json

An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may…

published 8y ago modified 4mo ago also EUVD-2018-2691

cvss
7.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.7%
EPSS 2.7% chance of exploitation in 30 days, percentile 86%
public exploits
1
Exploit-DB

Summary

An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.

Patch / fix

  • rockwellautomation rslinx_classic 3.90.01
  • rockwellautomation factorytalk_linx_gateway 3.90.00

Is CVE-2018-10619 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-18-158-01 updated cvss 8.8

Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway

  • Rockwell Automation FactoryTalk Linx Gateway <= 3.90.00 Rockwell Automation RSLinx Classic <= 3.90.01
    affected: vendor fix, mitigation “RSLinx Classic Versions 3.90.01 and prior, update to v4.00.01 or later available at:” compatibility.rockwellautomation.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. Published
  2. First public exploit (EDB-44892)

Exploit prediction

2.72% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • EDB-44892 RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation local, 2018-06-13

CVSS scores

assigned by version score vector
NVD 3.0 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • ICS-CERT Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway

Classification

Weakness
  • CWE-428 Unquoted Search Path or Element

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.