PT-2019-6901 · Rockwell Automation · Rslinx Enterprise

Publicado 2019-03-26 · Atualizado 2020-02-10 · CVE-2013-2806

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation RSLinx Enterprise Software versions CPR9 through CPR9-SR6

Description The issue arises from incorrect handling of input, resulting in a logic error when the "End of Current Record" field is calculated with an incorrect value. This can be triggered by sending a datagram to the service over Port 4444/UDP with a modified "Record Data Size" field set to an oversized value, causing the service to calculate an undersized "Total Record Size" and subsequently an incorrect "End of Current Record" value. This leads to access violations and a service crash, which can be recovered with a manual reboot.

Recommendations For versions CPR9 through CPR9-SR6, refer to the Rockwell Automation security advisory for patches and detailed information on resolving the issue.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2013-2806

Produtos afetados

Rslinx Enterprise

Referências · 2

• https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2806 · Nota de Segurança