PT-2013-1950 · Rockwell Automation · Micrologix 1100+10

Published 2013-01-24 · Updated 2026-06-03 · CVE-2012-6442

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation EtherNet/IP products versions 18 and earlier Rockwell Automation EtherNet/IP products versions 19 and earlier Rockwell Automation EtherNet/IP products versions 20 and earlier 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules CompactLogix L32E and L35E controllers 1788-ENBT FLEXLogix adapter 1794-AENTR FLEX I/O EtherNet/IP adapter MicroLogix 1100 and 1400

Description The issue allows remote attackers to cause a denial of service, resulting in control and communication outage, via a CIP message that specifies a reset.

Recommendations For Rockwell Automation EtherNet/IP products versions 18 and earlier, update to a version later than 18 to resolve the issue. For Rockwell Automation EtherNet/IP products versions 19 and earlier, update to a version later than 19 to resolve the issue. For Rockwell Automation EtherNet/IP products versions 20 and earlier, update to a version later than 20 to resolve the issue. For 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules, consider disabling the CIP message reset functionality until a patch is available. For CompactLogix L32E and L35E controllers, restrict access to the CIP message functionality to minimize the risk of exploitation. For 1788-ENBT FLEXLogix adapter and 1794-AENTR FLEX I/O EtherNet/IP adapter, avoid using the CIP message reset functionality in the affected modules until the issue is resolved. For MicroLogix 1100 and 1400, consider implementing configuration changes to prevent the CIP message reset functionality from being exploited.

Fix

DoS

Improper Access Control

Buffer Overflow

Weakness Enumeration

CWE-284

CWE-119

Related Identifiers

CVE-2012-6442

Affected Products

1756-Enbt

1756-Eweb

1768-Enbt

1768-Eweb

1788-Enbt Flexlogix Adapter

1794-Aentr Flex I/O Ethernet/Ip Adapter

Compactlogix L32E

Compactlogix L35E

Ethernet/Ip

Micrologix 1100

Micrologix 1400

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2012-6442 · Security Note
• https://t.me/cveNotify/165805 · Telegram Post
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154 · Note
• https://tools.cisco.com/security/center/viewAlert.x?alertId=27862 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470156 · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-13-011-03 · Note
• http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102 · Note