← Back

CVE-2012-4715

nvd nist
Published: Apr 18, 2013Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a UDP packet with a certain integer length value that is (1) too large or (2) too small, leading to improper handling by Logger.dll.

Affected (8)

Rockwellautomation
1 product
Rslinx Enterprise
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Rslinx Enterprise
Version cpr9
Rslinx Enterprise
Version cpr9 sr1
Rslinx Enterprise
Version cpr9 sr2
Rslinx Enterprise
Version cpr9 sr3
Rslinx Enterprise
Version cpr9 sr4
Rslinx Enterprise
Version cpr9 sr5.1
Rslinx Enterprise
Version cpr9 sr5
Rslinx Enterprise
Version cpr9 sr6

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

Source: ics-cert@hq.dhs.gov
US Government Resource
Source: ics-cert@hq.dhs.gov
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.