Buffer overflow in Rockwellautomation Factorytalk
CVE-2012-0222
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted packet.
Vulnerability class: Buffer Overflow
EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.
Affected products
- Rockwellautomation Factorytalk — versions cpr9, cpr9_sr5
- Rockwellautomation Rslogix_5000 — versions 17, 18, 19
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_MISC)
- cret@cert.org (US Government Resource, x_refsource_MISC)