PT-2012-2413
CVE-2012-0222
·
Published
2012-04-02
·
Updated
2012-04-03
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5
RSLogix 5000 versions 17 through 20
Description
The issue allows remote attackers to cause a denial of service via a crafted packet, resulting in an out-of-bounds read.
Recommendations
For Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5, update to a version outside of the affected range to resolve the issue.
For RSLogix 5000 versions 17 through 20, update to a version outside of the affected range to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾