CVEvulnerability

CVE-2012-0221

5.0 MEDIUM Published 2012-04-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-04-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet.

Affected configurations

• rockwellautomation factorytalk cpr9 • rockwellautomation factorytalk cpr9 sr5 • rockwellautomation rslogix 5000 17 • rockwellautomation rslogix 5000 18 • rockwellautomation rslogix 5000 19 • rockwellautomation rslogix 5000 20

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References