Buffer overflow in Rockwellautomation Eds Hardware Installation Tool

CVE-2011-2530

Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed .eds file.

Vulnerability class: Buffer Overflow

EPSS: 0.076 (94.2th percentile) — read the EPSS interpretation.

Affected products

Rockwellautomation Eds_hardware_installation_tool
Rockwellautomation Rslinx
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_CONFIRM, US Government Resource)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (Permissions Required, x_refsource_CONFIRM)