RSS   Vulnerabilities for 'Rslinx enterprise'   RSS

2019-03-26
 
CVE-2013-2805

CWE-125
 

 
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it receives a datagram with an incorrect value in the ?Record Data Size? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to an oversized value, an attacker could cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to this vulnerability can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599

 
 
CVE-2013-2807

CWE-125
 

 
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the ?Total Record Size? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to a specifically oversized value, the service will calculate an undersized value for the ?Total Record Size? that will cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599

 
 
CVE-2013-2806

CWE-190
 

 
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the ?End of Current Record? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to a specifically oversized value, the service will calculate an undersized value for the ?Total Record Size.? Then the service will calculate an incorrect value for the ?End of Current Record? field causing access violations that lead to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation security advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599

 
2013-04-18
 
CVE-2012-4715

CWE-119
 

 
Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long UDP packet that is not properly handled by Logger.dll.

 
2013-04-17
 
CVE-2012-4695

CWE-20
 

 
LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage) via a zero-byte UDP packet that is not properly handled by Logger.dll.

 

 >>> Vendor: Rockwellautomation 114 Products
Controllogix 1756-enbt/a ethernet/ ip bridge
Ab micrologix controller 1100
Ab micrologix controller 1400
1756-enbt series a
1756-enbt series a firmware
Eds hardware installation tool
Rslinx classic
Factorytalk diagnostics viewer
Rslogix
Factorytalk
Rslogix 5000
Ab micrologix controller
Plc-5 controller
Slc 500 controller
Controllogix controllers
Guardlogix controllers
Micrologix
Softlogix controllers
1756-enbt
1756-eweb
1768-enbt
1768-eweb
1794-aentr flex i/o ethernet/ip adapter
Compactlogix
Compactlogix controllers
Compactlogix l32e controller
Compactlogix l35e controller
Controllogix
Flexlogix 1788-enbt adapter
Guardlogix
Softlogix
Rslinx enterprise
Factorytalk services platform
Rslogix 5000 design and configuration software
Connected components workbench
Factorytalk view studio
Rsview32
Micrologix 1100 firmware
Micrologix 1400 firmware
1763-l16awa series a
1763-l16awa series b
1763-l16bbb series a
1763-l16bbb series b
1763-l16bwa series a
1763-l16bwa series b
1763-l16dwd series a
1763-l16dwd series b
Compactlogix controller 1769 firmware
Integrated architecture builder
Factorytalk energrymetrix
1766-l32awa
1766-l32awaa
1766-l32bwa
1766-l32bwaa
1766-l32bxb
1766-l32bxba
Rslogix 500 professional edition
Rslogix 500 standard edition
Rslogix 500 starter edition
Rslogix micro developer
Rslogix micro starter lite
1766-l32awa series b
1766-l32bxb series b
1766-l32awa series a
1766-l32bxb series a
1766-l32awaa series a
1766-l32bxba series b
1766-l32awaa series b
1766-l32bwaa series a
1766-l32bwa series b
1766-l32bwa series a
1766-l32bwaa series b
1766-l32bxba series a
Controllogix 5580 firmware
Compactlogix 5830 firmware
Panelview plus 6 700-1500 firmware
Softlogic
1763-l16dwd firmware
1763-l16bbb firmware
1763-l16bwa firmware
1763-l16awa firmware
Factorytalk alarms and events
1766-l32awa firmware
1766-l32awaa firmware
1766-l32bwa firmware
1766-l32bwaa firmware
1766-l32bxb firmware
1766-l32bxba firmware
Rslinx
Micrologix 1400 b firmware
Factorytalk activation
Arena
Allen-bradley l30erms firmware
1756-en2f series a firmware
1756-en2f series b firmware
1756-en2f series c firmware
1756-en2t series a firmware
1756-en2t series b firmware
1756-en2t series c firmware
1756-en2t series d firmware
See all Products for Vendor Rockwellautomation


Copyright 2019, cxsecurity.com

 

Back to Top