CVE-2012-6440
Description
The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the product’s Web server to view and alter product configuration and diagnostics information. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation controllogix_controllers | v ≤ 20 | — |
| rockwellautomation guardlogix_controllers | v ≤ 20 | — |
| rockwellautomation micrologix | v ≤ 1100, v ≤ 1400 | — |
| rockwellautomation softlogix_controllers | v ≤ 19 | — |
| rockwellautomation 1756-enbt | No range specified | — |
| rockwellautomation 1756-eweb | No range specified | — |
| rockwellautomation 1768-enbt | No range specified | — |
| rockwellautomation 1768-eweb | No range specified | — |
| rockwellautomation 1794-aentr_flex_i\/o_ethernet\/ip_adapter | No range specified | — |
| rockwellautomation compactlogix | v ≤ 18 | — |
| rockwellautomation compactlogix_controllers | v ≤ 19 | — |
| rockwellautomation compactlogix_l32e_controller | No range specified | — |
| rockwellautomation compactlogix_l35e_controller | No range specified | — |
| rockwellautomation controllogix | v ≤ 18 | — |
| rockwellautomation flexlogix_1788-enbt_adapter | No range specified | — |
| rockwellautomation guardlogix | v ≤ 18 | — |
| rockwellautomation softlogix | v ≤ 18 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.