The vulnerability of the RSLinx Classic communication server, related to uncontrolled resource consumption, allows attackers to cause service interruptions.

🗓️ 13 Dec 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

RSLinx Classic has an uncontrolled resource consumption vulnerability that can cause service failures from crafted Ethernet internet protocol packets to port 44818.

Reporter	Title	Published	Views	Family All 29
Tenable Nessus	Rockwell Automation RSLinx Classic <= 4.00.01 Multiple Vulnerabilities (ICSA-18-263-02)	15 Jul 201900:00	–	nessus
Tenable Nessus	Foxit PhantomPDF < 8.3.8 Multiple Vulnerabilities	30 Nov 201800:00	–	nessus
Tenable Nessus	Foxit PhantomPDF < 9.3 Multiple Vulnerabilities	12 Oct 201800:00	–	nessus
Tenable Nessus	Foxit Reader < 9.3 Multiple Vulnerabilities	12 Oct 201800:00	–	nessus
Tenable Nessus	Rockwellautomation Rslinx Uncontrolled Resource Consumption	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwell Automation RSLinx Classic <= 4.00.01 Multiple Vulnerabilities	24 Sep 201800:00	–	nessus
Tenable Nessus	Rockwell (CVE-2018-14827) (deprecated)	7 Feb 202200:00	–	nessus
BDU FSTEC	The vulnerability of the RSLinx Classic communication server arises from the execution of operations beyond the buffer boundaries in memory, allowing attackers to cause service failures.	13 Dec 201800:00	–	bdu_fstec
CNVD	Rockwell Automation RSLinx Classic Denial of Service Vulnerability (CNVD-2019-09766)	21 Sep 201800:00	–	cnvd
Check Point Advisories	Foxit Reader and PhantomPDF Multiple Use After Free Vulnerabilities (CVE-2018-3940; CVE-2018-3941; CVE-2018-3942; CVE-2018-3943; CVE-2018-3944; CVE-2018-3945; CVE-2018-3946)	2 Oct 201800:00	–	checkpoint_advisories

Vulners

Node

rockwell_automation rslinx_classicRange≤4.00.01

Source	Link
cxsecurity	www.cxsecurity.com/cveshow/CVE-2018-3943/
threatpost	www.threatpost.ru/rockwell-releases-new-patches-for-rslinx-classic/28368/
securitylab	www.securitylab.ru/news/495668.php
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-263-02
tenable	www.tenable.com/security/research/tra-2018-26
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 38.6

EPSS0.00709