CVEvulnerability
CVE-2026-12661
4.8 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-09-01
- Last modified
- 2026-09-01
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 4.8 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weaknesses
- CWE-121
Description
A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive.
Related
Weakness · CWE (1)
- CWE-121 Stack-based Buffer Overflow weakness
References
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1796.html www.rockwellautomation.com