CVE-2012-5048
published 2012-09-28CVE-2012-5048: APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a…
PriorityP340high7.8CVSS 2.0
AVNACLAuNCNINAC
EXPLOIT
EPSS
6.91%
93.3th percentile
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted packet.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| optimalog | optima_plc | <= 1.5.2 | — |
| optimalog | optima_plc | — | — |
| optimalog | optima_plc | — | — |
| optimalog | optima_plc | — | — |
| optimalog | optima_plc | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f57q-38g7-4pgj: APIFTP Server in Optimalog Optima PLC 1
ghsa_unreviewed·2022-05-17
CVE-2012-5048 [HIGH] GHSA-f57q-38g7-4pgj: APIFTP Server in Optimalog Optima PLC 1
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted packet.
CISA ICS
Optimalog Optima PLC Multiple Vulnerabilities
cisa_ics·2013-04-22
Optimalog Optima PLC Multiple Vulnerabilities
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Optimalog Optima PLC Multiple Vulnerabilities
Last RevisedApril 22, 2013
Alert CodeICSA-12-271-02
## Overview
Independent researcher Luigi Auriemma identified a NULL Pointer Dereference and an Infinite Loop and released proof-of-concept (exploit) code for Optimalog’s Optima PLC application without coordination with ICS-CERT, the vendor, or any other coordinating entity known to ICS-CERT.
Optimalog has released a new version to address these vulnerabilities. The component APIFTP is no longer installed by default with Optima PLC, the user must check a specific option. A security
No detection rules found.
No writeups or analysis indexed.
2012-09-28
Published