CVE:CVE-2012-4713
CNNVD:CNNVD-201304-065
FactoryTalk Services Platform是一套由多个产品组成的服务平台，它为应用程序提供常规服务，如诊断信息、健康监视和实时数据访问等。
FactoryTalk Services Platform中的RNADiagnostics.dll中存在拒绝服务漏洞，该漏洞源于程序没有正确地处理用户所提交的数据。攻击者可利用该漏洞引起受影响应用程序崩溃，并拒绝对合法用户提供服务。以下版本中存在此漏洞：FactoryTalk Services Platform CPR9，FactoryTalk Services Platform CPR9-SR1，FactoryTalk Services Platform CPR9-SR2，FactoryTalk Services Platform CPR9-SR3，FactoryTalk Services Platform CPR9-SR4，FactoryTalk Services Platform CPR9-SR5，FactoryTalk Services Platform CPR9-SR5.1，FactoryTalk Services Platform CPR9-SR6。
solution:Upgrade rockwellautomation factorytalk_services_platform to a higher version than cpr9,cpr9:sr1,cpr9:sr2,cpr9:sr3,cpr9:sr4,cpr9:sr5,cpr9:sr5.1,cpr9:sr6,and avoid the version cpr9,cpr9:sr1,cpr9:sr2,cpr9:sr3,cpr9:sr4,cpr9:sr5,cpr9:sr5.1,cpr9:sr6