PT-2013-1317 · Rockwell Automation · 1788-Enbt Flexlogix Adapter+10

Published 2013-01-24 · Updated 2026-06-03 · CVE-2012-6437

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation EtherNet/IP products versions 18 and earlier Rockwell Automation EtherNet/IP products versions 19 and earlier Rockwell Automation EtherNet/IP products versions 20 and earlier 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules (affected versions not specified) CompactLogix L32E and L35E controllers (affected versions not specified) 1788-ENBT FLEXLogix adapter (affected versions not specified) 1794-AENTR FLEX I/O EtherNet/IP adapter (affected versions not specified) MicroLogix 1100 and 1400 (affected versions not specified)

Description The issue is related to inadequate authentication procedures for Ethernet firmware updates in Rockwell Automation products, allowing remote attackers to execute arbitrary code via a Trojan horse update image. This vulnerability can be exploited by a remote attacker to execute arbitrary code by using modified firmware.

Recommendations For Rockwell Automation EtherNet/IP products versions 18 and earlier, update to a version later than 18 to resolve the issue. For Rockwell Automation EtherNet/IP products versions 19 and earlier, update to a version later than 19 to resolve the issue. For Rockwell Automation EtherNet/IP products versions 20 and earlier, update to a version later than 20 to resolve the issue. For 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules, CompactLogix L32E and L35E controllers, 1788-ENBT FLEXLogix adapter, 1794-AENTR FLEX I/O EtherNet/IP adapter, and MicroLogix 1100 and 1400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2019-03754

CVE-2012-6437

Affected Products

1756-Enbt

1756-Eweb

1768-Enbt

1768-Eweb

1788-Enbt Flexlogix Adapter

1794-Aentr Flex I/O Ethernet/Ip Adapter

Compactlogix L32E

Compactlogix L35E

Ethernet/Ip

Micrologix 1100

Micrologix 1400

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2012-6437 · Security Note
• https://bdu.fstec.ru/vul/2019-03754 · Security Note
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470156 · Note
• http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-13-011-03 · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155 · Note
• https://t.me/cveNotify/165802 · Telegram Post
• https://t.me/cvenotify/127177 · Telegram Post