CVE-2012-0221

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service service outage via a craft...

CVE-2012-0222

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service out-of-bounds read via a crafted packet...

CVE-2012-0221

The CVE-2012-0221 entry affects Rockwell Automation’s FactoryTalk RNADiagReceiver service (CPR9 up to CPR9 SR5; RSLogix 5000 v17–20). A vulnerability in how the service handles the return value from an unspecified function can be triggered by a crafted UDP packet to RNADiagReceiver (port 4445), c...

CVE-2012-0221: Improper Input Validation

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service service outage via a craft...

PT-2012-2412

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 RSLogix 5000 versions 17 through 20 Description The issue arises from the FactoryTalk RNADiagReceiver service not properly handling the return value from an unspecified function...

PT-2012-2413

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 RSLogix 5000 versions 17 through 20 Description The issue allows remote attackers to cause a denial of service via a crafted packet, resulting in an out-of-bounds read...

CVE-2011-3489

RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service crash via a crafted rna packet with a long string to TCP port 4446 that triggers 1 "a memset zero overflow" or 2 an out-of-bounds read, related to improper handling of ...

Out-of-bounds

RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service crash via a crafted rna packet with a long string to TCP port 4446 that triggers 1 "a memset zero overflow" or 2 an out-of-bounds read, related to improper handling of ...

CVE-2011-3489

CVE-2011-3489 affects Rockwell RSLogix/FactoryTalk components. Affects: RnaUtility.dll in RsvcHost.exe (RSLogix 19 and earlier). Vulnerable in the RNAn packet handling on TCP port 4446 due to improper handling of a 32-bit size field, enabling a remote attacker to cause a denial-of-service (crash)...

CVE-2011-3489: Improper Restriction of Operations within the Bounds of a Memory Buffer

RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service crash via a crafted rna packet with a long string to TCP port 4446 that triggers 1 "a memset zero overflow" or 2 an out-of-bounds read, related to improper handling of ...

PT-2011-4470

Name of the Vulnerable Software and Affected Versions RSLogix versions 19 and earlier Description The issue allows remote attackers to cause a denial of service crash via a crafted rna packet with a long string to TCP port 4446. This is related to improper handling of a 32-bit size field and can...

Rockwell RSLogix 19 - Denial of Service

Luigi Auriemma Application: Rockwell RSLogix http://www.rockwellautomation.com/rockwellsoftware/design/rslogix5000/ Versions: = 19 RsvcHost.exe 2.30.0.23 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web:...

Rockwell RSLogix 19 - Denial of Service

Rockwell RSLogix 19 - Denial of Service Luigi Auriemma Application: Rockwell RSLogix http://www.rockwellautomation.com/rockwellsoftware/design/rslogix5000/ Versions: = 19 RsvcHost.exe 2.30.0.23 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma...

Rockwell PLC5/SLC5/0x/RSLogix Security Vulnerability

Overview Rockwell Automation has identified a security vulnerability in the programming and configuration client software authentication mechanism employed by certain versions of the PLC-5 and SLC 5/0x family of programmable controllers. Affected Products Rockwell PLC-5 and SLC 5/0x controllers a...