PT-2013-1947 · Rockwell Automation · Guardlogix+14

Published 2013-01-24 · Updated 2025-06-30 · CVE-2012-6439

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation EtherNet/IP products versions prior to the fixed version Rockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules versions prior to the fixed version Rockwell Automation CompactLogix L32E and L35E controllers versions prior to the fixed version Rockwell Automation 1788-ENBT FLEXLogix adapter versions prior to the fixed version Rockwell Automation 1794-AENTR FLEX I/O EtherNet/IP adapter versions prior to the fixed version Rockwell Automation ControlLogix versions 18 and earlier Rockwell Automation CompactLogix versions 18 and earlier Rockwell Automation GuardLogix versions 18 and earlier Rockwell Automation SoftLogix versions 18 and earlier Rockwell Automation CompactLogix controllers versions 19 and earlier Rockwell Automation SoftLogix controllers versions 19 and earlier Rockwell Automation ControlLogix controllers versions 20 and earlier Rockwell Automation GuardLogix controllers versions 20 and earlier Rockwell Automation MicroLogix 1100 and 1400 versions prior to the fixed version

Description The issue allows remote attackers to cause a denial of service, resulting in control and communication outage, via a CIP message that modifies the configuration or network parameters.

Recommendations For Rockwell Automation EtherNet/IP products, update to a version that contains a fix for this issue. For Rockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules, update to a version that contains a fix for this issue. For Rockwell Automation CompactLogix L32E and L35E controllers, update to a version that contains a fix for this issue. For Rockwell Automation 1788-ENBT FLEXLogix adapter, update to a version that contains a fix for this issue. For Rockwell Automation 1794-AENTR FLEX I/O EtherNet/IP adapter, update to a version that contains a fix for this issue. For Rockwell Automation ControlLogix versions 18 and earlier, update to a version later than 18. For Rockwell Automation CompactLogix versions 18 and earlier, update to a version later than 18. For Rockwell Automation GuardLogix versions 18 and earlier, update to a version later than 18. For Rockwell Automation SoftLogix versions 18 and earlier, update to a version later than 18. For Rockwell Automation CompactLogix controllers versions 19 and earlier, update to a version later than 19. For Rockwell Automation SoftLogix controllers versions 19 and earlier, update to a version later than 19. For Rockwell Automation ControlLogix controllers versions 20 and earlier, update to a version later than 20. For Rockwell Automation GuardLogix controllers versions 20 and earlier, update to a version later than 20. For Rockwell Automation MicroLogix 1100 and 1400, update to a version that contains a fix for this issue.

Fix

DoS

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2012-6439

Affected Products

1756-Enbt

1756-Eweb

1768-Enbt

1768-Eweb

1788-Enbt Flexlogix

1794-Aentr Flex I/O

Compactlogix

Compactlogix L32E

Compactlogix L35E

Controllogix

Ethernet/Ip

Guardlogix

Micrologix 1100

Micrologix 1400

Softlogix

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-6439 · Security Note
• https://t.me/cvenotify/127179 · Telegram Post
• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470156 · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155 · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf · Note
• http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102 · Note