medium5.0Public exploit code
CVE-2012-0221
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Rockwell Automation FactoryTalk Activation Server - Multiple Denial of Service Vulnerabilities2012-01-17 · dos · multiple · Verified
Impact
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Factorytalk | Versions cpr9, cpr9_sr5 |
| Rockwellautomation | Rslogix 5000 | Versions 17, 18, 19, 20 |