PT-2013-1944 · Rockwell Automation · Guardlogix+14

Published 2013-01-24 · Updated 2025-06-30 · CVE-2012-6435

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation EtherNet/IP products versions prior to the fixed version Rockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules versions prior to the fixed version Rockwell Automation CompactLogix L32E and L35E controllers versions prior to the fixed version Rockwell Automation 1788-ENBT FLEXLogix adapter versions prior to the fixed version Rockwell Automation 1794-AENTR FLEX I/O EtherNet/IP adapter versions prior to the fixed version Rockwell Automation ControlLogix 18 and earlier Rockwell Automation CompactLogix 18 and earlier Rockwell Automation GuardLogix 18 and earlier Rockwell Automation SoftLogix 18 and earlier Rockwell Automation CompactLogix controllers 19 and earlier Rockwell Automation SoftLogix controllers 19 and earlier Rockwell Automation ControlLogix controllers 20 and earlier Rockwell Automation GuardLogix controllers 20 and earlier Rockwell Automation MicroLogix 1100 and 1400 versions prior to the fixed version

Description The issue allows remote attackers to cause a denial of service, resulting in control and communication outage, via a CIP message that specifies a logic-execution stop and fault.

Recommendations For Rockwell Automation EtherNet/IP products, update to a version that includes a fix for this issue. For Rockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules, update to a version that includes a fix for this issue. For Rockwell Automation CompactLogix L32E and L35E controllers, update to a version that includes a fix for this issue. For Rockwell Automation 1788-ENBT FLEXLogix adapter, update to a version that includes a fix for this issue. For Rockwell Automation 1794-AENTR FLEX I/O EtherNet/IP adapter, update to a version that includes a fix for this issue. For Rockwell Automation ControlLogix 18 and earlier, update to a version later than 18. For Rockwell Automation CompactLogix 18 and earlier, update to a version later than 18. For Rockwell Automation GuardLogix 18 and earlier, update to a version later than 18. For Rockwell Automation SoftLogix 18 and earlier, update to a version later than 18. For Rockwell Automation CompactLogix controllers 19 and earlier, update to a version later than 19. For Rockwell Automation SoftLogix controllers 19 and earlier, update to a version later than 19. For Rockwell Automation ControlLogix controllers 20 and earlier, update to a version later than 20. For Rockwell Automation GuardLogix controllers 20 and earlier, update to a version later than 20. For Rockwell Automation MicroLogix 1100 and 1400, update to a version that includes a fix for this issue.

Fix

DoS

Improper Access Control

Weakness Enumeration

CWE-399

CWE-284

Related Identifiers

CVE-2012-6435

Affected Products

1756-Enbt

1756-Eweb

1768-Enbt

1768-Eweb

1788-Enbt Flexlogix

1794-Aentr Flex I/O

Compactlogix

Compactlogix L32E

Compactlogix L35E

Controllogix

Ethernet/Ip

Guardlogix

Micrologix 1100

Micrologix 1400

Softlogix

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-6435 · Security Note
• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470156 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf · Note
• https://cisa.gov/news-events/ics-advisories/icsa-13-011-03 · Note
• http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102 · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154 · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155 · Note
• https://t.me/cvenotify/127175 · Telegram Post