CVE-2012-6435highCWE-284

CVE-2012-6435: falha de alta gravidade em Rockwell Automation CompactLogix L32E and L35E…

Rockwell Automation ControlLogix PLC Improper Access Control

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CompactLogix+ Monitorar ControlLogix

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 43%
When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the CPU to stop logic execution and enter a fault state, a DoS can occur. This situation could cause loss of availability and a disruption of communication with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Rockwell Automation · 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modulesRockwell Automation · 1788-ENBT FLEXLogix adapterRockwell Automation · 1794-AENTR FLEX I/O EtherNet/IP adapterRockwell Automation · CompactLogix and SoftLogix controllersRockwell Automation · CompactLogix L32E and L35E controllersRockwell Automation · ControlLogix and GuardLogix controllersRockwell Automation · ControlLogix, CompactLogix, GuardLogix, and SoftLogixRockwell Automation · MicroLogix
CVEs relacionadas — Rockwell Automation CompactLogix L32E and L35E…

No mesmo produto, das mais perigosas para as menos.

CVE-2012-6441—Rockwell Automation ControlLogix PLC Information ExposureEPSS 57.1%CVE-2012-6438HIGHRockwell Automation ControlLogix PLC Improper Input ValidationEPSS 35.5%CVE-2012-6442HIGHRockwell Automation ControlLogix PLC Improper Access ControlEPSS 35.3%CVE-2012-6436HIGHRockwell Automation ControlLogix PLC Improper Input ValidationEPSS 35.2%CVE-2012-6439—Rockwell Automation ControlLogix PLC Improper Access ControlEPSS 23.2%CVE-2012-6437CRITICALRockwell Automation ControlLogix PLC Improper AuthenticationEPSS 10.5%