rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-4621 
The Device Sensor feature in Cisco IOS 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via a DHCP packet, aka Bug ID CSCty96049.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-27T00:00:00.000Z
CVE-2012-4622 
Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service (card reload) via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-27T00:00:00.000Z
CVE-2012-4623 
The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2.xSG before 3.2.5SG, 3.2.xS, 3.2.xXO, 3.3.xS, and 3.3.xSG before 3.3.1SG allows remote attackers to cause a denial of service (device reload) via a malformed DHCPv6 packet, aka Bug ID CSCto57723.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-27T00:00:00.000Z
CVE-2012-4629 
The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0.2-103, allows remote attackers to cause a denial of service (disk consumption and application hang) via unspecified IPv4 packets that trigger log entries, aka Bug ID CSCub70603.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-12T23:00:00.000Z
CVE-2012-4638 
Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound SSH session, aka Bug ID CSCto00318.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-23T10:00:00.000Z
CVE-2012-4643 
The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.28), 8.1 before 8.1(2.56), 8.2 before 8.2(5.27), 8.3 before 8.3(2.31), 8.4 before 8.4(3.10), 8.5 before 8.5(1.9), and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets, aka Bug ID CSCtw84068.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-29T20:00:00.000Z
CVE-2012-4651 
Cisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a denial of service (latency) via SYN packets that are not accompanied by SYN-ACK packets from the Scan Safe Tower, aka Bug ID CSCub85451.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-23T10:00:00.000Z
CVE-2012-4655 
The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-24T17:00:00.000Z
CVE-2012-4658 
The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that trigger incorrectly terminated HTTP sessions, aka Bug ID CSCtz99447.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-23T10:00:00.000Z
CVE-2012-4659 
The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response, aka Bug ID CSCtz04566.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-29T20:00:00.000Z
CVE-2012-4660 
The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.17), 8.3 before 8.3(2.28), 8.4 before 8.4(2.13), 8.5 before 8.5(1.4), and 8.6 before 8.6(1.5) allows remote attackers to cause a denial of service (device reload) via a crafted SIP media-update packet, aka Bug ID CSCtr63728.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-29T20:00:00.000Z
CVE-2012-4661 
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.34), 8.4 before 8.4(4.4), 8.5 before 8.5(1.13), and 8.6 before 8.6(1.3) and the Firewall Services Module (FWSM) 4.1 before 4.1(9) in Cisco Catalyst 6500 series switches and 7600 series routers might allow remote attackers to execute arbitrary code via a crafted DCERPC packet, aka Bug IDs CSCtr21359 and CSCtr27522.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-29T20:00:00.000Z
CVE-2012-4662 
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.25), 8.4 before 8.4(2.5), and 8.5 before 8.5(1.13) and the Firewall Services Module (FWSM) 4.1 before 4.1(7) in Cisco Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via a crafted DCERPC packet, aka Bug IDs CSCtr21376 and CSCtr27524.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-29T20:00:00.000Z
CVE-2012-4663 
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.25), 8.4 before 8.4(2.5), and 8.5 before 8.5(1.13) and the Firewall Services Module (FWSM) 4.1 before 4.1(7) in Cisco Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via a crafted DCERPC packet, aka Bug IDs CSCtr21346 and CSCtr27521.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-29T20:00:00.000Z
CVE-2012-4667 
Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.cgi, (b) clwarn.cgi.de_DE, (c) clwarn.cgi.en_EN, (d) clwarn.cgi.fr_FR, (e) clwarn.cgi.pt_BR, or (f) clwarn.cgi.ru_RU in cgi-bin/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-25T10:00:00.000Z
CVE-2012-4668 
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-25T10:00:00.000Z
CVE-2012-4669 
M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-25T16:00:00.000Z
CVE-2012-4670 
Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-25T16:00:00.000Z
CVE-2012-4671 
psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-25T16:00:00.000Z
CVE-2012-4672 
Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-25T16:00:00.000Z
CVE-2012-4673 
SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL commands via vectors involving the sort_col variable in the list_items function, a different vulnerability than CVE-2012-3477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-26T01:00:00.000Z
CVE-2012-4674 
PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-26T18:00:00.000Z
CVE-2012-4675 
Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-26T18:00:00.000Z
CVE-2012-4676 
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-26T19:00:00.000Z
CVE-2012-4677 
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-26T19:00:00.000Z
CVE-2012-4678 
munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service (disk consumption) via many requests to an image with unique parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-26T21:00:00.000Z
CVE-2012-4679 
Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-27T21:00:00.000Z
CVE-2012-4680 
Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in a URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-27T23:00:00.000Z
CVE-2012-4681 
Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-28T00:00:00.000Z
CVE-2012-4682 
Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-4683.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-14T23:00:00.000Z
CVE-2012-4683 
Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-4682.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-14T23:00:00.000Z
CVE-2012-4684 
The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service (resource consumption) via a valid modified signature for a circulating alert.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T10:00:00.000Z
CVE-2012-4685 
Cross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.6.0 before patch 1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-28T16:00:00.000Z
CVE-2012-4686 
SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL commands via the announcementid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-28T16:00:00.000Z
CVE-2012-4687 Post Oak Bluetooth Traffic Systems Insufficient Entropy
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
Problem types: cwe_id: CWE-331
description: CWE-331
Affected products: vendor: Post Oak Traffic Systems
product: AWAM Bluetooth Reader Traffic System
default_status: unaffected
Credits: lang: en
value: research group composed of Nadia Heninger (University of California at San Diego), J. Alex Halderman, Zakir Durumeric, and Eric Wustrow (all from the University of Michigan)
Published: 2012-12-08T15:00:00.000Z
CVE-2012-4688 I-GEN opLYNX Central Authentication Bypass
The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support.
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: i-GEN Solutions Corporation
product: opLYNX
default_status: unaffected
Credits: lang: en
value: Anthony Cicalla has identified an authentication bypass vulnerability
Published: 2012-12-31T11:00:00.000Z
CVE-2012-4689 
Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-17T16:00:00.000Z
CVE-2012-4690 
Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-08T15:00:00.000Z
CVE-2012-4691 
Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-18T11:00:00.000Z
CVE-2012-4693 
Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by reading this file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-18T11:00:00.000Z
CVE-2012-4694 
Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-15T11:00:00.000Z
CVE-2012-4695 
LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage) via a zero-byte UDP packet that is not properly handled by Logger.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-18T01:00:00.000Z
CVE-2012-4696 
Buffer overflow in Beijer ADP 6.5.0-180_R1967 and 6.5.1-186_R2942, and H-Designer 6.5.0 B180_R1967, allows local users to gain privileges by inserting a long string into a DLL file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-28T18:00:00.000Z
CVE-2012-4697 
TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-23T17:00:00.000Z
CVE-2012-4698 
Siemens RuggedCom Rugged Operating System (ROS) before 3.12, ROX I OS through 1.14.5, ROX II OS through 2.3.0, and RuggedMax OS through 4.2.1.4621.22 use hardcoded private keys for SSL and SSH communication, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic by leveraging the availability of these keys within ROS files at all customer installations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-23T21:00:00.000Z
CVE-2012-4700 
Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-08T02:00:00.000Z
CVE-2012-4701 
Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-15T11:00:00.000Z
CVE-2012-4702 
360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-11T17:00:00.000Z
CVE-2012-4703 
The Emerson DeltaV SE3006 through 11.3.1, DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1, and DeltaV VE3006 through 10.3.1 and 11.x through 11.3.1 allow remote attackers to cause a denial of service (device restart) via a crafted packet on (1) TCP port 23, (2) UDP port 161, or (3) TCP port 513.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-11T21:00:00.000Z
CVE-2012-4704 
Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-24T11:00:00.000Z
CVE-2012-4705 
Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-24T11:00:00.000Z
CVE-2012-4706 
Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-24T11:00:00.000Z
CVE-2012-4707 
3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-24T11:00:00.000Z
CVE-2012-4708 
Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-24T11:00:00.000Z
CVE-2012-4709 
Invensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2012-4710 
Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-04T16:00:00.000Z
CVE-2012-4711 
Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-15T11:00:00.000Z
CVE-2012-4712 
Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-15T11:00:00.000Z
CVE-2012-4713 
Integer signedness error in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage or RNADiagReceiver.exe daemon crash) via UDP data that specifies a negative integer value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-18T01:00:00.000Z
CVE-2012-4714 
Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage or RNADiagReceiver.exe daemon crash) via UDP data that specifies a large integer value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-18T01:00:00.000Z
CVE-2012-4715 
Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a UDP packet with a certain integer length value that is (1) too large or (2) too small, leading to improper handling by Logger.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-18T10:00:00.000Z