CVE-2012-0222

The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted packet.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cret@cert.org

Published

2012-04-02

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Factorytalk (Rockwellautomation)
• Rslogix 5000 (Rockwellautomation)

References

• http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf