CVE-2012-5049
published 2012-09-28CVE-2012-5049: APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
PriorityP341high7.8CVSS 2.0
AVNACLAuNCNINAC
EXPLOIT
EPSS
3.43%
87.4th percentile
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| optimalog | optima_plc | <= 1.5.2 | — |
| optimalog | optima_plc | — | — |
| optimalog | optima_plc | — | — |
| optimalog | optima_plc | — | — |
| optimalog | optima_plc | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Optimalog Optima PLC Multiple Vulnerabilities
cisa_ics·2013-04-22
Optimalog Optima PLC Multiple Vulnerabilities
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Optimalog Optima PLC Multiple Vulnerabilities
Last RevisedApril 22, 2013
Alert CodeICSA-12-271-02
## Overview
Independent researcher Luigi Auriemma identified a NULL Pointer Dereference and an Infinite Loop and released proof-of-concept (exploit) code for Optimalog’s Optima PLC application without coordination with ICS-CERT, the vendor, or any other coordinating entity known to ICS-CERT.
Optimalog has released a new version to address these vulnerabilities. The component APIFTP is no longer installed by default with Optima PLC, the user must check a specific option. A security
GHSA
GHSA-cr6f-6xcv-jxhv: APIFTP Server in Optimalog Optima PLC 1
ghsa_unreviewed·2022-05-17
CVE-2012-5049 [HIGH] CWE-20 GHSA-cr6f-6xcv-jxhv: APIFTP Server in Optimalog Optima PLC 1
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
No detection rules found.
No writeups or analysis indexed.
2012-09-28
Published