CVE-2013-2807

🗓️ 26 Mar 2019 16:35:16Reported by icscertType

cve🔗 web.nvd.nist.gov👁 51 Views🌐 WEB

Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 Input Handling Logic Erro

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2013-2807	26 Mar 201919:32	–	circl
Cvelist	CVE-2013-2807	26 Mar 201916:35	–	cvelist
EUVD	EUVD-2013-2746	7 Oct 202500:30	–	euvd
NVD	CVE-2013-2807	26 Mar 201917:29	–	nvd
Tenable Nessus	Rockwellautomation Rslinx Out-of-bounds Read	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwell (CVE-2013-2807) (deprecated)	7 Feb 202200:00	–	nessus
Prion	Out-of-bounds	26 Mar 201917:29	–	prion

NVD

Vulners

Node

rockwellautomation rslinx_enterpriseMatch5.10.00

rockwellautomation rslinx_enterpriseMatch5.10.01

rockwellautomation rslinx_enterpriseMatch5.20.00

rockwellautomation rslinx_enterpriseMatch5.21.00

rockwellautomation rslinx_enterpriseMatch5.30.00

rockwellautomation rslinx_enterpriseMatch5.40.00

rockwellautomation rslinx_enterpriseMatch5.50.00

rockwellautomation rslinx_enterpriseMatch5.51.00

rockwellautomation rslinx_enterpriseMatch5.60.00

[
  {
    "product": "RSLinx Enterprise Software",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "CPR9"
      },
      {
        "status": "affected",
        "version": "CPR9-SR1"
      },
      {
        "status": "affected",
        "version": "CPR9-SR2"
      },
      {
        "status": "affected",
        "version": "CPR9-SR3"
      },
      {
        "status": "affected",
        "version": "CPR9-SR4"
      },
      {
        "status": "affected",
        "version": "CPR9-SR5"
      },
      {
        "status": "affected",
        "version": "CPR9-SR5.1"
      },
      {
        "status": "affected",
        "version": "CPR9-SR6"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-13-095-02

Parameter	Position	Path	Description	CWE
Record Data Size	binary	port 4444/UDP	Datagram-based vulnerability where an oversized Record Data Size causes an undersized Total Record Size, leading to an out-of-bounds read and service crash in Rockwell Automation RSLinx Enterprise (LogReceiver.exe).	CWE-125, CWE-190
Total Record Size	binary	port 4444/UDP	Datagram-based vulnerability where an oversized Record Data Size causes an undersized Total Record Size, leading to an out-of-bounds read and service crash in Rockwell Automation RSLinx Enterprise (LogReceiver.exe).	CWE-125, CWE-190

21 Nov 2024 01:52Current

7.5High risk

Vulners AI Score7.5

CVSS 37.5

CVSS 27.8

EPSS0.00034