Unscored severity · published Apr 2, 2012
CVE-2012-0221
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return…
–
CVSS
10.2%
EPSS
No
On KEV
Description
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
Factorytalk · Rockwellautomation
cpr9; cpr9_sr5 · source: NVD
R5
Rslogix 5000 · Rockwellautomation
17; 18; 19; 20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0221
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0221
rockwellautomation.custhelp.com
http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937
US Government Resource
http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf
More from Factorytalk
–
CVE-2012-0222
The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a…