PT-2012-2412 · Rockwell Automation · Rslogix 5000+1

Published 2012-04-02 · Updated 2012-04-03 · CVE-2012-0221

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 RSLogix 5000 versions 17 through 20

Description The issue arises from the FactoryTalk RNADiagReceiver service not properly handling the return value from an unspecified function. This allows remote attackers to cause a denial of service, resulting in a service outage, by sending a crafted packet.

Recommendations For Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5, update to a version that properly handles the return value from the unspecified function to prevent denial of service attacks. For RSLogix 5000 versions 17 through 20, update to a version that properly handles the return value from the unspecified function to prevent denial of service attacks.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-0221

Affected Products

Factorytalk Cpr9

Rslogix 5000

References · 4

• 🔥 https://exploit-db.com/exploits/36570 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-0221 · Security Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf · Note
• http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937 · Note