CVE-2014-9204: Buffer Overflow
Published May 17, 2015
·Updated
Stack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00 allows remote attackers to execute arbitrary code via a crafted CSV file.
Affected Software
1 affected component
rockwellautomation Rslinx<3.73.00
Event History
May 17, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9204?
CVE-2014-9204 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2014-9204?
To fix CVE-2014-9204, upgrade RSLinx Classic to version 3.73.00 or later.
3
What type of attack does CVE-2014-9204 enable?
CVE-2014-9204 allows remote attackers to execute arbitrary code through a crafted CSV file.
4
Which software is affected by CVE-2014-9204?
CVE-2014-9204 affects Rockwell Automation's RSLinx Classic versions prior to 3.73.00.
5
Can CVE-2014-9204 be exploited over the network?
Yes, CVE-2014-9204 can be exploited remotely, making it particularly dangerous to networked systems.