Input Handling Flaw in Rockwell Automation RSLinx Enterprise Software

CVE-2013-2807

What is CVE-2013-2807?

The RSLinx Enterprise Software by Rockwell Automation, specifically the LogReceiver.exe component, contains an input handling flaw that results in a logic error. When an oversized value is sent in the 'Record Data Size' field of a datagram over Port 4444/UDP, it leads to incorrect calculations of the 'Total Record Size'. This miscalculation may trigger an out-of-bounds read access violation, leading to a crash of the service. Recovery requires a manual reboot of the affected service. For detailed patches and advisories, refer to the Rockwell Automation Security Advisory.

References