5
CVE-2012-0221
- EPSS 2.94%
- Published 02.04.2012 18:55:01
- Last modified 11.04.2025 00:51:21
- Source cret@cert.org
- Teams watchlist Login
- Open Login
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet.
Data is provided by the National Vulnerability Database (NVD)
Rockwellautomation ≫ Factorytalk Versioncpr9
Rockwellautomation ≫ Factorytalk Versioncpr9_sr5
Rockwellautomation ≫ Rslogix 5000 Version17
Rockwellautomation ≫ Rslogix 5000 Version18
Rockwellautomation ≫ Rslogix 5000 Version19
Rockwellautomation ≫ Rslogix 5000 Version20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.94% | 0.859 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.