CVE-2012-6439

Published: Jan 24, 2013Modified: Apr 29, 2026

8.5

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Exploitability: 10.0 / Impact: 7.8

Source: NVD

Description

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s configuration and network parameters, a DoS condition can occur. This situation could cause loss of availability and a disruption of communication with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

Affected (18)

Products: Rockwellautomation: 1756 Enbt, 1756 Eweb, 1768 Enbt, 1768 Eweb, 1794 Aentr Flex I/o Ethernet/ip Adapter, Compactlogix, Compactlogix Controllers, Compactlogix L32e Controller, Compactlogix L35e Controller, Controllogix, Controllogix Controllers, Flexlogix 1788 Enbt Adapter, Guardlogix, Guardlogix Controllers, Micrologix, Softlogix, Softlogix Controllers

17 products

1794 Aentr Flex I/o Ethernet/ip Adapter

Compactlogix

Compactlogix Controllers

Compactlogix L32e Controller

Compactlogix L35e Controller

Controllogix

Controllogix Controllers

Flexlogix 1788 Enbt Adapter

Guardlogix

Guardlogix Controllers

Micrologix

Softlogix

Softlogix Controllers

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Rockwellautomation 1756 Enbt	All versions
Rockwellautomation 1756 Eweb	All versions
Rockwellautomation 1768 Enbt	All versions
Rockwellautomation 1768 Eweb	All versions
Rockwellautomation 1794 Aentr Flex I/o Ethernet/ip Adapter	All versions
Rockwellautomation Compactlogix	Up to 18
Rockwellautomation Compactlogix Controllers	Up to 19
Rockwellautomation Compactlogix L32e Controller	All versions
Rockwellautomation Compactlogix L35e Controller	All versions
Rockwellautomation Controllogix	Up to 18
Rockwellautomation Controllogix Controllers	Up to 20
Rockwellautomation Flexlogix 1788 Enbt Adapter	All versions
Rockwellautomation Guardlogix	Up to 18
Rockwellautomation Guardlogix Controllers	Up to 20
Rockwellautomation Micrologix	Up to 1100
Rockwellautomation Micrologix	Up to 1400
Rockwellautomation Softlogix	Up to 18
Rockwellautomation Softlogix Controllers	Up to 19