PT-2012-5554 · Rockwell Automation Allen Bradley · Plc-5+2

Publicado 2012-12-08 · Atualizado 2013-05-21 · CVE-2012-4690

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix controller versions 1100, 1200, 1400, and 1500 SLC 500 controller platform PLC-5 controller platform

Description The issue allows remote attackers to cause a denial of service via messages that trigger modification of status bits when Static status is not enabled.

Recommendations For Rockwell Automation Allen-Bradley MicroLogix controller versions 1100, 1200, 1400, and 1500, enable Static status to prevent modification of status bits. For SLC 500 controller platform, enable Static status to prevent modification of status bits. For PLC-5 controller platform, enable Static status to prevent modification of status bits.

Correção

DoS

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2012-4690

Produtos afetados

Micrologix

Plc-5

Sl 500

Referências · 5

• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/511407 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4690 · Nota
• http://ics-cert.us-cert.gov/advisories/ICSA-12-342-01A · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4690 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-12-342-01.pdf · Nota