CVE-2012-5049

Published: Sep 28, 2012Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

Affected (5)

Products: Optimalog: Optima Plc

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Optimalog Optima Plc	Up to 1.5.2
Optimalog Optima Plc	Version 1.4.10
Optimalog Optima Plc	Version 1.4.9
Optimalog Optima Plc	Version 1.5.0
Optimalog Optima Plc	Version 1.5.1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.securityfocus.com/bid/55712

Source: cve@mitre.org

http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-02.pdf

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/bid/55712

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-02.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.