CVE-2011-2530

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-06-22 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.58 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed .eds file.

Affected products

Rockwellautomation Eds Hardware Installation Tool: through 1.0.5.1
Rockwell Automation RSLinx Classic®: before 2.58 — fixed in 2.58

How to fix

Upgrade to a fixed version: Rockwell Automation RSLinx Classic® 2.58. Check the vendor advisory for mitigations.

References

http://rockwellautomation.custhelp.com/app/answers/detail/a_id/279194
http://www.kb.cert.org/vuls/id/127584
http://www.kb.cert.org/vuls/id/MAPG-8G9PWX
http://www.securityfocus.com/bid/48092
http://rockwellautomation.custhelp.com/app/answers/detail/a_id/279194
http://www.kb.cert.org/vuls/id/127584
http://www.kb.cert.org/vuls/id/MAPG-8G9PWX
http://www.securityfocus.com/bid/48092

Get alerted when CVE-2011-2530 or the next vulnerability affects your stack