Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 allow remote attackers to cause a denial of service (control and communication outage) via a CIP message that specifies a reset.
References
Link | Resource |
---|---|
http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf | Broken Link Third Party Advisory US Government Resource |
https://tools.cisco.com/security/center/viewAlert.x?alertId=27862 | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
|
History
No history.
Information
Published : 2013-01-24 21:55
Updated : 2024-02-04 18:16
NVD link : CVE-2012-6442
Mitre link : CVE-2012-6442
CVE.ORG link : CVE-2012-6442
JSON object : View
Products Affected
rockwellautomation
- ethernet\/ip_firmware
- l32e
- 1756-eweb
- controllogix_firmware
- 1794-aentr
- 1756-enbt
- compactlogix_firmware
- softlogix_controllers_firmware
- controllogix_controllers_firmware
- compactlogix_controllers_firmware
- guardlogix_controllers_firmware
- softlogix_firmware
- guardlogix_firmware
- 1768-eweb
- flex_i\/o_ethernet\/ip__firmware
- 1100
- 1788-enbt
- l35e
- 1400
- flexlogix_firmware
- micrologix_firmware
- 1768-enbt
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer