PT-2013-1945 · Rockwell Automation · Micrologix 1400+14

Publicado 2013-01-24 · Atualizado 2026-06-03 · CVE-2012-6436

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation EtherNet/IP products versions prior to the fixed version Rockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules versions prior to the fixed version Rockwell Automation CompactLogix L32E and L35E controllers versions prior to the fixed version Rockwell Automation 1788-ENBT FLEXLogix adapter versions prior to the fixed version Rockwell Automation 1794-AENTR FLEX I/O EtherNet/IP adapter versions prior to the fixed version Rockwell Automation ControlLogix 18 and earlier Rockwell Automation CompactLogix 18 and earlier Rockwell Automation GuardLogix 18 and earlier Rockwell Automation SoftLogix 18 and earlier Rockwell Automation CompactLogix controllers 19 and earlier Rockwell Automation SoftLogix controllers 19 and earlier Rockwell Automation ControlLogix controllers 20 and earlier Rockwell Automation GuardLogix controllers 20 and earlier Rockwell Automation MicroLogix 1100 and 1400 versions prior to the fixed version

Description A buffer overflow issue in Rockwell Automation EtherNet/IP products allows remote attackers to cause a denial of service (CPU crash and communication outage) via a malformed CIP packet.

Recommendations For Rockwell Automation EtherNet/IP products, update to a version that includes the fix for this issue. For Rockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules, update to a version that includes the fix for this issue. For Rockwell Automation CompactLogix L32E and L35E controllers, update to a version that includes the fix for this issue. For Rockwell Automation 1788-ENBT FLEXLogix adapter, update to a version that includes the fix for this issue. For Rockwell Automation 1794-AENTR FLEX I/O EtherNet/IP adapter, update to a version that includes the fix for this issue. For Rockwell Automation ControlLogix 18 and earlier, update to a version later than 18. For Rockwell Automation CompactLogix 18 and earlier, update to a version later than 18. For Rockwell Automation GuardLogix 18 and earlier, update to a version later than 18. For Rockwell Automation SoftLogix 18 and earlier, update to a version later than 18. For Rockwell Automation CompactLogix controllers 19 and earlier, update to a version later than 19. For Rockwell Automation SoftLogix controllers 19 and earlier, update to a version later than 19. For Rockwell Automation ControlLogix controllers 20 and earlier, update to a version later than 20. For Rockwell Automation GuardLogix controllers 20 and earlier, update to a version later than 20. For Rockwell Automation MicroLogix 1100 and 1400, update to a version that includes the fix for this issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-6436

Produtos afetados

1756-Enbt

1756-Eweb

1768-Enbt

1768-Eweb

1788-Enbt Flexlogix Adapter

1794-Aentr Flex I/O Ethernet/Ip Adapter

Compactlogix

Compactlogix L32E

Compactlogix L35E

Controllogix

Ethernet/Ip

Guardlogix

Micrologix 1100

Micrologix 1400

Softlogix

Referências · 9

• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470156 · Nota
• http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102 · Nota
• https://t.me/cvenotify/127176 · Publicação no Telegram
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154 · Nota
• https://t.me/cveNotify/165801 · Publicação no Telegram
• https://cisa.gov/news-events/ics-advisories/icsa-13-011-03 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6436 · Nota de Segurança
• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155 · Nota
• http://us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf · Nota