CVE-2012-0221

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 RSLogix 5000 versions 17 through 20

Description The issue arises from the FactoryTalk RNADiagReceiver service not properly handling the return value from an unspecified function. This allows remote attackers to cause a denial of service, resulting in a service outage, by sending a crafted packet.

Recommendations For Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5, update to a version that properly handles the return value from the unspecified function to prevent denial of service attacks. For RSLogix 5000 versions 17 through 20, update to a version that properly handles the return value from the unspecified function to prevent denial of service attacks.