CVE-2011-3489

CVE-2011-3489 describes a denial-of-service vulnerability in Rockwell RSLogix 19 and earlier, specifically within the RnaUtility.dll component of RsvcHost.exe. A remote attacker can crash the affected system by sending a specially crafted rna packet with a long string to TCP port 4446, triggering either a "memset zero overflow" or an out-of-bounds read due to improper handling of a 32-bit size field. This vulnerability has a CVSS score of 5.0, indicating a medium severity with network access, low attack complexity, no authentication required, and a partial impact on availability. While there is no evidence of active exploitation, a public exploit (EDB-17843) exists, and there is minimal community discussion or media coverage surrounding this CVE.