CVE-2011-2530 Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a...
HighCVSS 9.3
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed .eds file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation rslinx | < 2.58 | 2.58 |
| rockwellautomation eds hardware installation tool | <= 1.0.5.1 | No fix listed |
References
- rockwellautomation.custhelp.com permissions-required
- VU#127584 third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource
- 48092 third-party-advisory vdb-entry