CVE-2013-2806
highpriority · track · 31EPSS 0.039 · 90 %ileEUUSEPSS · scored 2026-10-27
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the “End of Current Record” field. By sending a datagram to the service over Port 4444/UDP with the “Record Data Size” field modified to a specifically oversized value, the service will calculate an undersized value for the “Total Record Size.” Then the service will calculate an incorrect value for the “End of Current Record” field causing access violations that lead to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation security advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationFactoryTalk Services Platform and RSLinx Enterprisecisa_csaf_ot
Rockwell Automation’s recommendation to asset owners using FTSP or RSLinx CPR9 through CPR9-SR4 is to upgrade to CPR9-SR5 or newer. Rockwell Automation also recommends that all asset owners using FTSP or RSLinx CPR9-SR5 and newer should apply the correlating patch for the version they are using.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (26)
Products and version ranges known to be affected.
- rockwellautomation rslinx enterprise= 5.10.00nvdUScpe:2.3:a:rockwellautomation:rslinx_enterprise:*:*:*:*:*:*:*:*
- rockwellautomation rslinx enterprise= 5.10.01nvdUScpe:2.3:a:rockwellautomation:rslinx_enterprise:*:*:*:*:*:*:*:*
- rockwellautomation rslinx enterprise= 5.20.00nvdUScpe:2.3:a:rockwellautomation:rslinx_enterprise:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-13-095-02ARockwell Automation FactoryTalk and RSLinx Vulnerabilities2013-01-07icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (5)
External citations — patches, advisories, analysis.
- http://www.rockwellautomation.com/Patchcnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2013-2806cnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02enisa_euvd
- https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02Third Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan