CVE-2018-18981
In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory consumption that could lead to a partial or complete denial-of-service condition to the affected services.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2019-01-24
- Last modified
- 2024-09-16
- Weaknesses
- CWE-122, CWE-787
Affected products
- Rockwell Automation Factorytalk Services Platform V2.90 And Earlier (Rockwell)
- Factorytalk Services Platform (Rockwellautomation)
References
- http://www.securityfocus.com/bid/106279
- https://ics-cert.us-cert.gov/advisories/ICSA-18-331-02
