CVE-2014-0755

The CVE-2014-0755 issue affects Rockwell Automation RSLogix 5000 software, specifically project files (.ACD) created with RSLogix 5000 versions 7 through 20.01 and version 21.0. The vulnerability is due to insufficient protection of credentials in these password-protected files, enabling a local ...

Out-of-bounds

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service out-of-bounds read via a crafted packet...

Design/Logic Flaw

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service service outage via a craft...

CVE-2012-0222

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service out-of-bounds read via a crafted packet...

CVE-2012-0221

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service service outage via a craft...

CVE-2012-0222

CVE-2012-0222 affects Rockwell Automation’s FactoryTalk RNADiagReceiver (CPR9 up to SR5; RSLogix 5000 17–20). A remote attacker can induce a DoS via a crafted packet, triggering an out-of-bounds read in the RNADiagReceiver service (listening on UDP/Port 4445 per advisory updates). Connected docum...

CVE-2012-0221

The CVE-2012-0221 entry affects Rockwell Automation’s FactoryTalk RNADiagReceiver service (CPR9 up to CPR9 SR5; RSLogix 5000 v17–20). A vulnerability in how the service handles the return value from an unspecified function can be triggered by a crafted UDP packet to RNADiagReceiver (port 4445), c...

CVE-2011-3489

RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service crash via a crafted rna packet with a long string to TCP port 4446 that triggers 1 "a memset zero overflow" or 2 an out-of-bounds read, related to improper handling of ...

Out-of-bounds

RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service crash via a crafted rna packet with a long string to TCP port 4446 that triggers 1 "a memset zero overflow" or 2 an out-of-bounds read, related to improper handling of ...

CVE-2011-3489

CVE-2011-3489 affects Rockwell RSLogix/FactoryTalk components. Affects: RnaUtility.dll in RsvcHost.exe (RSLogix 19 and earlier). Vulnerable in the RNAn packet handling on TCP port 4446 due to improper handling of a 32-bit size field, enabling a remote attacker to cause a denial-of-service (crash)...

Rockwell RSLogix 19 - Denial of Service

Rockwell RSLogix 19 - Denial of Service Luigi Auriemma Application: Rockwell RSLogix http://www.rockwellautomation.com/rockwellsoftware/design/rslogix5000/ Versions: = 19 RsvcHost.exe 2.30.0.23 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma...

Rockwell RSLogix 19 - Denial of Service

Luigi Auriemma Application: Rockwell RSLogix http://www.rockwellautomation.com/rockwellsoftware/design/rslogix5000/ Versions: = 19 RsvcHost.exe 2.30.0.23 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web:...

Rockwell PLC5/SLC5/0x/RSLogix Security Vulnerability

Overview Rockwell Automation has identified a security vulnerability in the programming and configuration client software authentication mechanism employed by certain versions of the PLC-5 and SLC 5/0x family of programmable controllers. Affected Products Rockwell PLC-5 and SLC 5/0x controllers a...