CVE-2011-2530

CRITICO 9.3CVE-2011-2530 · Published 22/06/2011 · updated 16/06/2026

In breve

CVE-2011-2530 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda eds hardware installation tool (rockwellautomation), rslinx (rockwellautomation).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 7.6%, superiore al 94.5% delle vulnerabilità.
Correzione: aggiornare a 2.58 o successiva.

Package	Affected versions	Patched versions
eds hardware installation tool rockwellautomation	`≤ 1.0.5.1`	No fix yet
rslinx rockwellautomation	`< 2.58`	`2.58`

Description

Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed .eds file.

References

rockwellautomation.custhelp.com/app/answers/detail/a_id/279194 · Permissions Required
kb.cert.org/vuls/id/127584 · US Government Resource
kb.cert.org/vuls/id/MAPG-8G9PWX · US Government Resource
securityfocus.com/bid/48092 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free