Lucene search
HistorySep 16, 2011 - 2:28 p.m.
CVE-2011-3489
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.5
Confidence
High
EPSS
0.006
Percentile
78.5%
RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446 that triggers (1) “a memset zero overflow” or (2) an out-of-bounds read, related to improper handling of a 32-bit size field.
Affected configurations
Node
rockwellautomationrslogixRange≤19
| Vendor | Product | Version | CPE |
|---|---|---|---|
| rockwellautomation | rslogix | * | cpe:2.3:a:rockwellautomation:rslogix:*:*:*:*:*:*:*:* |
Related
nessus
nessus
Rockwellautomation Rslogix Improper Restriction of Operations within the Bounds of a Memory Buffer
2019-11-08 00:00:00
Rockwell (CVE-2011-3489) (deprecated)
2022-02-07 00:00:00
checkpoint_advisories
checkpoint_advisories
Rockwell RSLogix 5000 RNA Denial of Service (CVE-2011-3489)
2019-01-24 00:00:00
ics
ics
Rockwell RSLogix Overflow Vulnerability (Update A)
2018-09-06 12:00:00
exploitdb
exploitdb
Rockwell RSLogix 19 - Denial of Service
2011-09-14 00:00:00
prion
prion
Out-of-bounds
2011-09-16 14:28:00
cvelist
cvelist
CVE-2011-3489
2011-09-16 14:00:00
cve
cve
CVE-2011-3489
2011-09-16 14:28:12
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.5
Confidence
High
EPSS
0.006
Percentile
78.5%
Related for NVD:CVE-2011-3489