CVE-2012-6436
Description
The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the CPU to crash. Successful exploitation of this vulnerability could cause loss of availability and a disruption in communications with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation controllogix_controllers | v ≤ 20 | — |
| rockwellautomation guardlogix_controllers | v ≤ 20 | — |
| rockwellautomation micrologix | v ≤ 1100, v ≤ 1400 | — |
| rockwellautomation softlogix_controllers | v ≤ 19 | — |
| rockwellautomation 1756-enbt | No range specified | — |
| rockwellautomation 1756-eweb | No range specified | — |
| rockwellautomation 1768-enbt | No range specified | — |
| rockwellautomation 1768-eweb | No range specified | — |
| rockwellautomation 1794-aentr_flex_i\/o_ethernet\/ip_adapter | No range specified | — |
| rockwellautomation compactlogix | v ≤ 18 | — |
| rockwellautomation compactlogix_controllers | v ≤ 19 | — |
| rockwellautomation compactlogix_l32e_controller | No range specified | — |
| rockwellautomation compactlogix_l35e_controller | No range specified | — |
| rockwellautomation controllogix | v ≤ 18 | — |
| rockwellautomation flexlogix_1788-enbt_adapter | No range specified | — |
| rockwellautomation guardlogix | v ≤ 18 | — |
| rockwellautomation softlogix | v ≤ 18 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.