CVE-2013-2805: rockwell automation rslinx enterprise software Out-of-bounds Read
Vulnerability summary
CVE-2013-2805 is a high (CVSS 7.8) Out-of-bounds Read vulnerability in rockwell automation rslinx enterprise software. EPSS estimates a 3.85% chance of exploitation in the next 30 days, higher than 90% of scored vulnerabilities.
Timeline
- 26-03-2019PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it receives a datagram with an incorrect value in the “Record Data Size” field. By sending a datagram to the service over Port 4444/UDP with the “Record Data Size” field modified to an oversized value, an attacker could cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to this vulnerability can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.85%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.85% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Rockwell automation1 product
- rslinx enterprise softwareCPR9 | CPR9-SR1 | CPR9-SR2 | CPR9-SR3 | CPR9-SR4 | CPR9-SR5 | CPR9-SR5.1 | CPR9-SR6
Rockwellautomation1 product
- rslinx_enterprise5.10.00 | 5.10.01 | 5.20.00 | 5.21.00 | 5.30.00 | 5.40.00 | 5.50.00 | 5.51.00 | 5.60.00
2 vendors · 2 products
References
1 links- ics-cert.us-cert.gov/advisories/ICSA-13-095-02X Refsource MISCThird Party AdvisoryUS Government Resource