FactoryTalk Services Platform 'RNADiagnostics.dll' Denial of Service Vulnerability

Bugtraq ID:	58916
Class:	Input Validation Error
CVE:	CVE-2012-4713
Remote:	Yes
Local:	No
Published:	Apr 05 2013 12:00AM
Updated:	Oct 09 2013 12:46AM
Credit:	Carsten Eiram of Risk Based Security
Vulnerable:
Not Vulnerable:

FactoryTalk Services Platform 'RNADiagnostics.dll' Denial of Service Vulnerability

FactoryTalk Services Platform is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users.

The following versions are vulnerable:

FactoryTalk Services Platform CPR9
FactoryTalk Services Platform CPR9-SR1
FactoryTalk Services Platform CPR9-SR2
FactoryTalk Services Platform CPR9-SR3
FactoryTalk Services Platform CPR9-SR4
FactoryTalk Services Platform CPR9-SR5
FactoryTalk Services Platform CPR9-SR5.1
FactoryTalk Services Platform CPR9-SR6

FactoryTalk Services Platform 'RNADiagnostics.dll' Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FactoryTalk Services Platform 'RNADiagnostics.dll' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

FactoryTalk Services Platform 'RNADiagnostics.dll' Denial of Service Vulnerability

References:

• Rockwell Automation Homepage (Rockwell Automation)