CVE-2012-0221

EPSS 10.21%
Veröffentlicht 02.04.2012 18:55:01
Zuletzt bearbeitet 16.06.2026 23:36:55
Erkennungen
Login

The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 6 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rockwellautomation ≫ Factorytalk Version cpr9

Rockwellautomation ≫ Factorytalk Version cpr9_sr5

Rockwellautomation ≫ Rslogix 5000 Version 17

Rockwellautomation ≫ Rslogix 5000 Version 18

Rockwellautomation ≫ Rslogix 5000 Version 19

Rockwellautomation ≫ Rslogix 5000 Version 20

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.21%	0.952

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937

http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2012-0221

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0221

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0221

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-0221