CVE-2013-2805

CVE-2013-2805 is a logic error vulnerability affecting Rockwell Automation RSLinx Enterprise software versions CPR9 through CPR9-SR6. An attacker can exploit this by sending a malformed UDP datagram to port 4444, specifically manipulating the "Record Data Size" field. This triggers an out-of-bounds read, causing the LogReceiver.exe service to crash, leading to a denial of service that requires a manual reboot to restore. Rated with a CVSS score of 7.5 (HIGH), it is a network-exploitable vulnerability with low attack complexity and no user interaction required, resulting in high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.