CVE-2012-6441: Infoleak
First published: Thu Jan 24 2013(Updated: )
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 allow remote attackers to obtain sensitive information via a crafted CIP packet.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rockwellautomation Controllogix Controllers | <=20 | |
| Rockwellautomation Guardlogix Controllers | <=20 | |
| Rockwellautomation Micrologix | <=1100 | |
| Rockwellautomation Micrologix | <=1400 | |
| Rockwellautomation Softlogix Controllers | <=19 | |
| Rockwellautomation 1756-enbt | ||
| Rockwellautomation 1756-eweb | ||
| Rockwellautomation 1768-enbt | ||
| Rockwellautomation 1768-eweb | ||
| Rockwellautomation 1794-aentr Flex I\/o Ethernet\/ip Adapter | ||
| Rockwellautomation Compactlogix | <=18 | |
| Rockwellautomation Compactlogix Controllers | <=19 | |
| Rockwellautomation Compactlogix L32e Controller | ||
| Rockwellautomation Compactlogix L35e Controller | ||
| Rockwellautomation Controllogix | <=18 | |
| Rockwellautomation Flexlogix 1788-enbt Adapter | ||
| Rockwellautomation Guardlogix | <=18 | |
| Rockwellautomation Softlogix | <=18 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/rockwellautomation
- canonical/rockwellautomation controllogix controllers
- version/rockwellautomation controllogix controllers/20
- canonical/rockwellautomation guardlogix controllers
- version/rockwellautomation guardlogix controllers/20
- canonical/rockwellautomation micrologix
- version/rockwellautomation micrologix/1100
- version/rockwellautomation micrologix/1400
- canonical/rockwellautomation softlogix controllers
- version/rockwellautomation softlogix controllers/19
- canonical/rockwellautomation 1756-enbt
- canonical/rockwellautomation 1756-eweb
- canonical/rockwellautomation 1768-enbt
- canonical/rockwellautomation 1768-eweb
- canonical/rockwellautomation 1794-aentr flex i\/o ethernet\/ip adapter
- canonical/rockwellautomation compactlogix
- version/rockwellautomation compactlogix/18
- canonical/rockwellautomation compactlogix controllers
- version/rockwellautomation compactlogix controllers/19
- canonical/rockwellautomation compactlogix l32e controller
- canonical/rockwellautomation compactlogix l35e controller
- canonical/rockwellautomation controllogix
- version/rockwellautomation controllogix/18
- canonical/rockwellautomation flexlogix 1788-enbt adapter
- canonical/rockwellautomation guardlogix
- version/rockwellautomation guardlogix/18
- canonical/rockwellautomation softlogix
- version/rockwellautomation softlogix/18