CVE-2012-0221

The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cret@cert.org

Published

2012-04-02

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Factorytalk (Rockwellautomation)
• Rslogix 5000 (Rockwellautomation)

References

• http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf