Archive

24 January 2013

Vulnerabilities first published on this day (UTC), newest first.

← December 2012 2013 / January /24 February 2013 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 7.5

CVE-2012-6438 EPSS 36%

Rockwell Automation ControlLogix PLC Improper Input Validation

The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the NIC to crash. Successful ex…

Rockwell Automation ControlLogix, CompactLogix, GuardLogix, and SoftLogix ControlLogix and GuardLogix controllers CompactLogix L32E and L35E controllers ICS / OT

Jan 24, 2013
High 8.5

CVE-2012-6439 EPSS 23%

Rockwell Automation ControlLogix PLC Improper Access Control

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s configuration and network parameters, a DoS condition can occur. This…

Rockwell Automation MicroLogix 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules 1788-ENBT FLEXLogix adapter ICS / OT

Jan 24, 2013
High 7.5

CVE-2012-6435 EPSS 43%

Rockwell Automation ControlLogix PLC Improper Access Control

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the CPU to stop logic execution and enter a fault state, a DoS can occur. This si…

Rockwell Automation CompactLogix L32E and L35E controllers 1794-AENTR FLEX I/O EtherNet/IP adapter CompactLogix and SoftLogix controllers ICS / OT

Jan 24, 2013
High 7.5

CVE-2012-6442 EPSS 35%

Rockwell Automation ControlLogix PLC Improper Access Control

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the product to reset, a DoS can occur. This situation could cause loss of availab…

Rockwell Automation 1788-ENBT FLEXLogix adapter ControlLogix, CompactLogix, GuardLogix, and SoftLogix ControlLogix and GuardLogix controllers ICS / OT

Jan 24, 2013
High 7.5

CVE-2012-6436 EPSS 35%

Rockwell Automation ControlLogix PLC Improper Input Validation

The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the CPU to crash. Successful ex…

Rockwell Automation CompactLogix and SoftLogix controllers MicroLogix 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules ICS / OT

Jan 24, 2013