7.8
CVE-2012-4713
- EPSS 3.22%
- Veröffentlicht 18.04.2013 02:25:36
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Erkennungen
Integer signedness error in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage or RNADiagReceiver.exe daemon crash) via UDP data that specifies a negative integer value.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rockwellautomation ≫ Factorytalk Services Platform Version cpr9
Rockwellautomation ≫ Factorytalk Services Platform Version cpr9 Update sr1
Rockwellautomation ≫ Factorytalk Services Platform Version cpr9 Update sr2
Rockwellautomation ≫ Factorytalk Services Platform Version cpr9 Update sr3
Rockwellautomation ≫ Factorytalk Services Platform Version cpr9 Update sr4
Rockwellautomation ≫ Factorytalk Services Platform Version cpr9 Update sr5
Rockwellautomation ≫ Factorytalk Services Platform Version cpr9 Update sr5.1
Rockwellautomation ≫ Factorytalk Services Platform Version cpr9 Update sr6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.22% | 0.866 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599