VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 16, 2011· Updated Jun 16, 2026

CVE-2011-3489

CVE-2011-3489

Description

RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446 that triggers (1) "a memset zero overflow" or (2) an out-of-bounds read, related to improper handling of a 32-bit size field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Rockwellautomation/Rslogix2 versions
    cpe:2.3:a:rockwellautomation:rslogix:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:rockwellautomation:rslogix:*:*:*:*:*:*:*:*range: <=19
    • (no CPE)range: <=19

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.