Vulnerability Details : CVE-2012-0222
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted packet.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2012-0222
- cpe:2.3:a:rockwellautomation:factorytalk:cpr9:*:*:*:*:*:*:*
- cpe:2.3:a:rockwellautomation:factorytalk:cpr9_sr5:*:*:*:*:*:*:*
- cpe:2.3:a:rockwellautomation:rslogix_5000:17:*:*:*:*:*:*:*
- cpe:2.3:a:rockwellautomation:rslogix_5000:18:*:*:*:*:*:*:*
- cpe:2.3:a:rockwellautomation:rslogix_5000:19:*:*:*:*:*:*:*
- cpe:2.3:a:rockwellautomation:rslogix_5000:20:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-0222
0.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 40 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-0222
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2012-0222
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-0222
-
http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf
404 - File Not Found | CISAUS Government Resource
-
http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937
Rockwell Automation - Sign In
Jump to