CVE-2012-6437

Published: Jan 24, 2013Modified: Jun 3, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause loss of availability, integrity, and confidentiality and a disruption in communications with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

Affected (18)

Products: Rockwellautomation: 1756 Enbt, 1756 Eweb, 1768 Enbt, 1768 Eweb, 1794 Aentr Flex I/o Ethernet/ip Adapter, Compactlogix, Compactlogix Controllers, Compactlogix L32e Controller, Compactlogix L35e Controller, Controllogix, Controllogix Controllers, Flexlogix 1788 Enbt Adapter, Guardlogix, Guardlogix Controllers, Micrologix, Softlogix, Softlogix Controllers

17 products

1794 Aentr Flex I/o Ethernet/ip Adapter

Compactlogix

Compactlogix Controllers

Compactlogix L32e Controller

Compactlogix L35e Controller

Controllogix

Controllogix Controllers

Flexlogix 1788 Enbt Adapter

Guardlogix

Guardlogix Controllers

Micrologix

Softlogix

Softlogix Controllers

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Rockwellautomation 1756 Enbt	All versions
Rockwellautomation 1756 Eweb	All versions
Rockwellautomation 1768 Enbt	All versions
Rockwellautomation 1768 Eweb	All versions
Rockwellautomation 1794 Aentr Flex I/o Ethernet/ip Adapter	All versions
Rockwellautomation Compactlogix	Up to 18
Rockwellautomation Compactlogix Controllers	Up to 19
Rockwellautomation Compactlogix L32e Controller	All versions
Rockwellautomation Compactlogix L35e Controller	All versions
Rockwellautomation Controllogix	Up to 18
Rockwellautomation Controllogix Controllers	Up to 20
Rockwellautomation Flexlogix 1788 Enbt Adapter	All versions
Rockwellautomation Guardlogix	Up to 18
Rockwellautomation Guardlogix Controllers	Up to 20
Rockwellautomation Micrologix	Up to 1100
Rockwellautomation Micrologix	Up to 1400
Rockwellautomation Softlogix	Up to 18
Rockwellautomation Softlogix Controllers	Up to 19