« Volver al listado

CVE-2012-4695

Estado: ModificadaAlta (7.1)—

LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage) via a zero-byte UDP packet that is not properly handled by Logger.dll.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Rockwellautomation — Rslinx Enterprise

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4695",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-04-18T02:25:36.913",
  "references": [
    {
      "url": "http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage) via a zero-byte UDP packet that is not properly handled by Logger.dll."
    },
    {
      "lang": "es",
      "value": "LogReceiver.exe de Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, SR2-CPR9, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1 y CPR9-SR6 permite a atacantes remotos provocar una denegación de servicio (interrupción del servicio) a través de un paquete UDP de cero bytes que no se maneja adecuadamente por Logger.dll."
    }
  ],
  "lastModified": "2026-06-16T23:45:35.587",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:rockwellautomation:rslinx_enterprise:cpr9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5E175F9C-864E-47A9-B86F-68CB8E62273E"
            },
            {
              "criteria": "cpe:2.3:h:rockwellautomation:rslinx_enterprise:cpr9:sr1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35E07706-2CFF-4E29-9682-AF627181789C"
            },
            {
              "criteria": "cpe:2.3:h:rockwellautomation:rslinx_enterprise:cpr9:sr2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C43F1DB-8C69-4568-BA2B-9524727DBA5D"
            },
            {
              "criteria": "cpe:2.3:h:rockwellautomation:rslinx_enterprise:cpr9:sr3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A49F11FD-8C9B-4704-BC2D-CCF31F818A44"
            },
            {
              "criteria": "cpe:2.3:h:rockwellautomation:rslinx_enterprise:cpr9:sr4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02C21A5D-AA9A-4845-81AB-8C884F1C419A"
            },
            {
              "criteria": "cpe:2.3:h:rockwellautomation:rslinx_enterprise:cpr9:sr5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60D852E9-0438-489B-9B36-D8768F659770"
            },
            {
              "criteria": "cpe:2.3:h:rockwellautomation:rslinx_enterprise:cpr9:sr5.1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23C9AD76-9094-44BB-8B57-9631FEAE3CB3"
            },
            {
              "criteria": "cpe:2.3:h:rockwellautomation:rslinx_enterprise:cpr9:sr6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "670C0268-B3B3-4216-A9B1-AC9423B19DD6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}