Lucene search

K
nessusThis script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500416.NASL
HistoryAug 10, 2021 - 12:00 a.m.

Rockwellautomation Factorytalk Allocation of Resources Without Limits or Throttling

2021-08-1000:00:00
This script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
7

0.0004 Low

EPSS

Percentile

12.6%

An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messaging.dll. This can be done by sending a specially crafted message to 127.0.0.1:7153. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affected.

File data ot_500416.nasl
VendorProductVersionCPE
rockwellautomationfactorytalk_linx*cpe:2.3:a:rockwellautomation:factorytalk_linx:*:*:*:*:*:*:*:*

0.0004 Low

EPSS

Percentile

12.6%

Related for OT_500416.NASL