CVE-2012-4715: Buffer Overflow
Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a UDP packet with a certain integer length value that is (1) too large or (2) too small, leading to improper handling by Logger.dll.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4715?
CVE-2012-4715 is classified as a high severity vulnerability due to its potential to cause a denial of service or execute arbitrary code.
How do I fix CVE-2012-4715?
To fix CVE-2012-4715, ensure you update RSLinx Enterprise to the latest version provided by Rockwell Automation.
What type of vulnerability is CVE-2012-4715?
CVE-2012-4715 is a buffer overflow vulnerability in LogReceiver.exe.
Which versions of RSLinx Enterprise are affected by CVE-2012-4715?
CVE-2012-4715 affects multiple versions of RSLinx Enterprise, including CPR9 and its service releases up to CPR9-SR6.
Can CVE-2012-4715 lead to remote code execution?
Yes, CVE-2012-4715 can potentially enable remote attackers to execute arbitrary code via crafted UDP packets.