CVE-2012-0222: Buffer Overflow

Published Apr 2, 2012
·
Updated

The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted packet.

Affected Software

6 affected components
rockwellautomation Factorytalk=cpr9
rockwellautomation Factorytalk=cpr9_sr5
rockwellautomation Rslogix 5000=17
rockwellautomation Rslogix 5000=18
rockwellautomation Rslogix 5000=19
rockwellautomation Rslogix 5000=20

Event History

Apr 2, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2012-0222?

CVE-2012-0222 has been classified as a denial of service vulnerability, allowing remote attackers to perform an out-of-bounds read.

2

How do I fix CVE-2012-0222?

To fix CVE-2012-0222, update the Rockwell Automation FactoryTalk and RSLogix 5000 to the latest versions that contain the necessary patches.

3

What products are affected by CVE-2012-0222?

CVE-2012-0222 affects Rockwell Automation's FactoryTalk CPR9 through SR5 and RSLogix 5000 versions 17 to 20.

4

Can CVE-2012-0222 be exploited remotely?

Yes, CVE-2012-0222 can be exploited remotely by sending a crafted packet to the RNADiagReceiver service.

5

What are the potential impacts of CVE-2012-0222?

The potential impacts of CVE-2012-0222 include causing a denial of service condition, disrupting operations of impacted systems.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203