Lucene search

K
cve[email protected]CVE-2011-2957
HistoryJul 28, 2011 - 6:55 p.m.

CVE-2011-2957

2011-07-2818:55:03
web.nvd.nist.gov
21
vulnerability
rockwell automation
factorytalk diagnostics viewer
memory corruption
nvd
cve-2011-2957

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.3%

Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer (.ftd) configuration file, which triggers memory corruption.

Affected configurations

NVD
Node
rockwellautomationfactorytalk_diagnostics_viewerRange2.10.02
OR
rockwellautomationfactorytalk_diagnostics_viewerMatch2.10
OR
rockwellautomationfactorytalk_diagnostics_viewerMatch2.10.01

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.3%

Related for CVE-2011-2957