CVE-2012-6440 Rockwell Automation ControlLogix PLC Improper Input Validation
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the product’s Web server to view and alter product configuration and diagnostics information.
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation controllogix controllers | <= 20 | No fix listed |
| rockwellautomation guardlogix controllers | <= 20 | No fix listed |
| rockwellautomation micrologix | <= 1100 | No fix listed |
| rockwellautomation micrologix | <= 1400 | No fix listed |
| rockwellautomation softlogix controllers | <= 19 | No fix listed |
| rockwellautomation 1756-enbt | All versions | No fix listed |
| rockwellautomation 1756-eweb | All versions | No fix listed |
| rockwellautomation 1768-enbt | All versions | No fix listed |
| rockwellautomation 1768-eweb | All versions | No fix listed |
| rockwellautomation 1794-aentr flex io ethernetip adapter | All versions | No fix listed |
| rockwellautomation compactlogix | <= 18 | No fix listed |
| rockwellautomation compactlogix controllers | <= 19 | No fix listed |
| rockwellautomation compactlogix l32e controller | All versions | No fix listed |
| rockwellautomation compactlogix l35e controller | All versions | No fix listed |
| rockwellautomation controllogix | <= 18 | No fix listed |
| rockwellautomation flexlogix 1788-enbt adapter | All versions | No fix listed |
| rockwellautomation guardlogix | <= 18 | No fix listed |
| rockwellautomation softlogix | <= 18 | No fix listed |
| Rockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules | All versions | No fix listed |
| Rockwell Automation CompactLogix L32E and L35E controllers | All versions | No fix listed |
| Rockwell Automation 1788-ENBT FLEXLogix adapter | All versions | No fix listed |
| Rockwell Automation 1794-AENTR FLEX I/O EtherNet/IP adapter | All versions | No fix listed |
| Rockwell Automation ControlLogix, CompactLogix, GuardLogix, and SoftLogix | <= 18 | No fix listed |
| Rockwell Automation CompactLogix and SoftLogix controllers | <= 19 | No fix listed |
| Rockwell Automation ControlLogix and GuardLogix controllers | <= 20 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Rockwell Automation MicroLogix | = 1100 | No fix listed |
| Rockwell Automation MicroLogix | = 1400 | No fix listed |