Vulnerabilities for Rslinx enterprise (...) - CXSECURITY.COM

Vulnerabilities for 'Rslinx enterprise'

2020-05-20

CVE-2020-12034

CWE-89

Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior, RSNetWorx software: Version 28.00.00 and prior, Studio 5000 Logix Designer software: Version 32 and prior) is vulnerable.The EDS subsystem does not provide adequate input sanitation, which may allow an attacker to craft specialized EDS files to inject SQL queries and manipulate the database storing the EDS files. This can lead to denial-of-service conditions.

2020-05-19

CVE-2020-12038

CWE-119

Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior, RSNetWorx software: Version 28.00.00 and prior, Studio 5000 Logix Designer software: Version 32 and prior) is vulnerable. A memory corruption vulnerability exists in the algorithm that matches square brackets in the EDS subsystem. This may allow an attacker to craft specialized EDS files to crash the EDSParser COM object, leading to denial-of-service conditions.

2019-03-26

CVE-2013-2805

CWE-125

Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it receives a datagram with an incorrect value in the ?Record Data Size? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to an oversized value, an attacker could cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to this vulnerability can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599

CVE-2013-2807

CWE-125

Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the ?Total Record Size? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to a specifically oversized value, the service will calculate an undersized value for the ?Total Record Size? that will cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599

CVE-2013-2806

CWE-190

Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the ?End of Current Record? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to a specifically oversized value, the service will calculate an undersized value for the ?Total Record Size.? Then the service will calculate an incorrect value for the ?End of Current Record? field causing access violations that lead to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation security advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599

2013-04-18

CVE-2012-4715

CWE-119

Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long UDP packet that is not properly handled by Logger.dll.

2013-04-17

CVE-2012-4695

CWE-20

LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage) via a zero-byte UDP packet that is not properly handled by Logger.dll.

>>> Vendor: Rockwellautomation 144 Products

Controllogix 1756-enbt/a ethernet/ ip bridge

Ab micrologix controller 1100

Ab micrologix controller 1400

1756-enbt series a

1756-enbt series a firmware

Eds hardware installation tool

Factorytalk diagnostics viewer

Ab micrologix controller

Plc-5 controller

Slc 500 controller

Controllogix controllers

Guardlogix controllers

Softlogix controllers

1794-aentr flex i/o ethernet/ip adapter

Compactlogix controllers

Compactlogix l32e controller

Compactlogix l35e controller

Flexlogix 1788-enbt adapter

Rslinx enterprise

Factorytalk services platform

Rslogix 5000 design and configuration software

Connected components workbench

Factorytalk view studio

Micrologix 1100 firmware

Micrologix 1400 firmware

1763-l16awa series a

1763-l16awa series b

1763-l16bbb series a

1763-l16bbb series b

1763-l16bwa series a

1763-l16bwa series b

1763-l16dwd series a

1763-l16dwd series b

Compactlogix controller 1769 firmware

Integrated architecture builder

Factorytalk energrymetrix

Rslogix 500 professional edition

Rslogix 500 standard edition

Rslogix 500 starter edition

Rslogix micro developer

Rslogix micro starter lite

1766-l32awa series b

1766-l32bxb series b

1766-l32awa series a

1766-l32bxb series a

1766-l32awaa series a

1766-l32bxba series b

1766-l32awaa series b

1766-l32bwaa series a

1766-l32bwa series b

1766-l32bwa series a

1766-l32bwaa series b

1766-l32bxba series a

Controllogix 5580 firmware

Compactlogix 5830 firmware

Panelview plus 6 700-1500 firmware

1763-l16dwd firmware

1763-l16bbb firmware

1763-l16bwa firmware

1763-l16awa firmware

Factorytalk alarms and events

1766-l32awa firmware

1766-l32awaa firmware

1766-l32bwa firmware

1766-l32bwaa firmware

1766-l32bxb firmware

1766-l32bxba firmware

Micrologix 1400 b firmware

Factorytalk activation

Allen-bradley l30erms firmware

1756-en2f series a firmware

1756-en2f series b firmware

1756-en2f series c firmware

1756-en2t series a firmware

1756-en2t series b firmware

1756-en2t series c firmware

1756-en2t series d firmware

See all Products for Vendor Rockwellautomation

Copyright 2024, cxsecurity.com