CVE-2012-6441

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-6441
An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154
https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155
https://rockwellautomation.custhelp.com/app/answers/detail/aid/470156
https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-03
http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:rockwellautomation:controllogix_controllers:*:*:*:*:*:*:*:*
cpe:2.3:a:rockwellautomation:guardlogix_controllers:*:*:*:*:*:*:*:*
cpe:2.3:a:rockwellautomation:micrologix:*:*:*:*:*:*:*:*
cpe:2.3:a:rockwellautomation:micrologix:*:*:*:*:*:*:*:*
cpe:2.3:a:rockwellautomation:softlogix_controllers:*:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:1756-enbt:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:1756-eweb:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:1768-enbt:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:1768-eweb:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:1794-aentr_flex_i\/o_ethernet\/ip_adapter:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:compactlogix:*:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:compactlogix_controllers:*:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:compactlogix_l32e_controller:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:compactlogix_l35e_controller:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:controllogix:*:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:flexlogix_1788-enbt_adapter:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:guardlogix:*:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:softlogix:*:*:*:*:*:*:*:*
History

30 Jun 2025, 22:15

Type Values Removed Values Added
References
  • () http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102 -
  • () https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154 -
  • () https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155 -
  • () https://rockwellautomation.custhelp.com/app/answers/detail/aid/470156 -
  • () https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-03 -
Summary (en) Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 allow remote attackers to obtain sensitive information via a crafted CIP packet. (en) An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

21 Nov 2024, 01:46

Type Values Removed Values Added
References () http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf - US Government Resource () http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf - US Government Resource
Information

Published : 2013-01-24 21:55

Updated : 2025-06-30 22:15

NVD link : CVE-2012-6441

Mitre link : CVE-2012-6441

CVE.ORG link : CVE-2012-6441

JSON object : View

Products Affected

rockwellautomation

  • 1794-aentr_flex_i\/o_ethernet\/ip_adapter
  • flexlogix_1788-enbt_adapter
  • compactlogix
  • softlogix
  • controllogix_controllers
  • controllogix
  • softlogix_controllers
  • compactlogix_controllers
  • 1756-eweb
  • compactlogix_l32e_controller
  • 1768-eweb
  • 1768-enbt
  • guardlogix
  • guardlogix_controllers
  • 1756-enbt
  • micrologix
  • compactlogix_l35e_controller
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor