Vulnerability in Rockwell Automation 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb Communication Modules
CVE-2012-6439
When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s configuration and network parameters, a DoS c…
EPSS: 0.283 (97.9th percentile) — read the EPSS interpretation.
Affected products
- Rockwell Automation 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb Communication Modules — versions All
- Rockwell Automation 1788-enbt Flexlogix Adapter — versions All
- Rockwell Automation 1794-aentr Flex I/o Ethernet/ip Adapter — versions All
- Rockwell Automation Compactlogix And Softlogix Controllers — versions 0
- Rockwell Automation Compactlogix L32e And L35e Controllers — versions All
- Rockwell Automation Controllogix And Guardlogix Controllers — versions 0
- Rockwell Automation Controllogix, Compactlogix, Guardlogix, And Softlogix — versions 0
- Rockwell Automation Micrologix — versions 1400, 1100
- Rockwellautomation 1756-enbt
- Rockwellautomation 1756-eweb
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov