PT-2012-5554 · Rockwell Automation Allen Bradley · Plc-5+2

Published 2012-12-08 · Updated 2013-05-21 · CVE-2012-4690

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix controller versions 1100, 1200, 1400, and 1500 SLC 500 controller platform PLC-5 controller platform

Description The issue allows remote attackers to cause a denial of service via messages that trigger modification of status bits when Static status is not enabled.

Recommendations For Rockwell Automation Allen-Bradley MicroLogix controller versions 1100, 1200, 1400, and 1500, enable Static status to prevent modification of status bits. For SLC 500 controller platform, enable Static status to prevent modification of status bits. For PLC-5 controller platform, enable Static status to prevent modification of status bits.

Fix

DoS

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2012-4690

Affected Products

Micrologix

Plc-5

Sl 500

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-4690 · Security Note
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/511407 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4690 · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-12-342-01A · Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-342-01.pdf · Note