CVE-2012-6440

Published: Jan 24, 2013Modified: Jun 3, 2026

4.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.2 / Impact: 2.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the product’s Web server to view and alter product configuration and diagnostics information. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

Affected (18)

Products: Rockwellautomation: 1756 Enbt, 1756 Eweb, 1768 Enbt, 1768 Eweb, 1794 Aentr Flex I/o Ethernet/ip Adapter, Compactlogix, Compactlogix Controllers, Compactlogix L32e Controller, Compactlogix L35e Controller, Controllogix, Controllogix Controllers, Flexlogix 1788 Enbt Adapter, Guardlogix, Guardlogix Controllers, Micrologix, Softlogix, Softlogix Controllers

17 products

1794 Aentr Flex I/o Ethernet/ip Adapter

Compactlogix

Compactlogix Controllers

Compactlogix L32e Controller

Compactlogix L35e Controller

Controllogix

Controllogix Controllers

Flexlogix 1788 Enbt Adapter

Guardlogix

Guardlogix Controllers

Micrologix

Softlogix

Softlogix Controllers

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Rockwellautomation 1756 Enbt	All versions
Rockwellautomation 1756 Eweb	All versions
Rockwellautomation 1768 Enbt	All versions
Rockwellautomation 1768 Eweb	All versions
Rockwellautomation 1794 Aentr Flex I/o Ethernet/ip Adapter	All versions
Rockwellautomation Compactlogix	Up to 18
Rockwellautomation Compactlogix Controllers	Up to 19
Rockwellautomation Compactlogix L32e Controller	All versions
Rockwellautomation Compactlogix L35e Controller	All versions
Rockwellautomation Controllogix	Up to 18
Rockwellautomation Controllogix Controllers	Up to 20
Rockwellautomation Flexlogix 1788 Enbt Adapter	All versions
Rockwellautomation Guardlogix	Up to 18
Rockwellautomation Guardlogix Controllers	Up to 20
Rockwellautomation Micrologix	Up to 1100
Rockwellautomation Micrologix	Up to 1400
Rockwellautomation Softlogix	Up to 18
Rockwellautomation Softlogix Controllers	Up to 19