Buffer overflow in Emerson Deltav

CVE-2012-3035

Buffer overflow in Emerson DeltaV 9.3.1 and 10.3 through 11.3.1 allows remote attackers to cause a denial of service (daemon crash) via a long string to an unspecified port.

Vulnerability class: Buffer Overflow

EPSS: 0.022 (80.6th percentile) — read the EPSS interpretation.

Affected products

Emerson Deltav — versions 9.3.1, 10.3.1, 11.3
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

ics-cert@hq.dhs.gov (vdb-entry, x_refsource_BID)
ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
ics-cert@hq.dhs.gov (vdb-entry, x_refsource_XF)