CVE-2012-6437

The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause loss of availability, integrity, and...

CVE-2012-6437

Rockwell Automation CVE-2012-6437 affects numerous EtherNet/IP products and controllers (e.g., 1756-ENBT/EWEB, 1768-ENBT/EWEB, CompactLogix L32E/L35E, 1788-ENBT FLEXLogix, 1794-AENTR, MicroLogix 1100/1400, ControlLogix/GuardLogix/SoftLogix up to listed versions). Root cause: improper authenticati...