Improper input validation in Rockwellautomation Factorytalk
CVE-2012-0221
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.103 (95.2th percentile) — read the EPSS interpretation.
Affected products
- Rockwellautomation Factorytalk — versions cpr9, cpr9_sr5
- Rockwellautomation Rslogix_5000 — versions 17, 18, 19
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_MISC)
- cret@cert.org (US Government Resource, x_refsource_MISC)