CVE-2011-2530
published 2011-06-22CVE-2011-2530: Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows…
PriorityP338critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
7.59%
93.8th percentile
Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed .eds file.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| rockwellautomation | eds_hardware_installation_tool | <= 1.0.5.1 | — |
| rockwellautomation | rslinx | < 2.58 | 2.58 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://rockwellautomation.custhelp.com/app/answers/detail/a_id/279194http://www.kb.cert.org/vuls/id/127584http://www.kb.cert.org/vuls/id/MAPG-8G9PWXhttp://www.securityfocus.com/bid/48092http://rockwellautomation.custhelp.com/app/answers/detail/a_id/279194http://www.kb.cert.org/vuls/id/127584http://www.kb.cert.org/vuls/id/MAPG-8G9PWXhttp://www.securityfocus.com/bid/48092
2011-06-22
Published