Lucene search

K
cve[email protected]CVE-2012-4713
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-4713

2022-10-0316:15:33
CWE-189
web.nvd.nist.gov
27
cve-2012-4713
integer signedness error
rnadiagnostics.dll
rockwell automation
factorytalk services platform
ftsp
cpr9
denial of service
remote attack
udp data

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

Integer signedness error in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage or RNADiagReceiver.exe daemon crash) via UDP data that specifies a negative integer value.

Affected configurations

NVD
Node
rockwellautomationfactorytalk_services_platformMatchcpr9
OR
rockwellautomationfactorytalk_services_platformMatchcpr9sr1
OR
rockwellautomationfactorytalk_services_platformMatchcpr9sr2
OR
rockwellautomationfactorytalk_services_platformMatchcpr9sr3
OR
rockwellautomationfactorytalk_services_platformMatchcpr9sr4
OR
rockwellautomationfactorytalk_services_platformMatchcpr9sr5
OR
rockwellautomationfactorytalk_services_platformMatchcpr9sr5.1
OR
rockwellautomationfactorytalk_services_platformMatchcpr9sr6

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

Related for CVE-2012-4713