VulnerabilityModified
CVE-2011-2957
Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer (.ftd) configuration file, which triggers memory…
MEDIUM 6.9EPSS 0.64%
Does this matter?
Lower severity and a low EPSS score (0.64%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer (.ftd) configuration file, which triggers memory corruption.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 0.64% probability · 49th percentile
- CISA KEV
- Not listed
- Affected
- rockwellautomation/factorytalk diagnostics viewer
- Source
- cve@mitre.org
References
- http://rockwellautomation.custhelp.com/app/answers/detail/a_id/448424
- http://www.securityfocus.com/bid/48962
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-175-01.pdfUS Government Resource
- http://rockwellautomation.custhelp.com/app/answers/detail/a_id/448424
- http://www.securityfocus.com/bid/48962
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-175-01.pdfUS Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.