CVE-2012-6437

Rockwell Automation CVE-2012-6437 affects numerous EtherNet/IP products and controllers (e.g., 1756-ENBT/EWEB, 1768-ENBT/EWEB, CompactLogix L32E/L35E, 1788-ENBT FLEXLogix, 1794-AENTR, MicroLogix 1100/1400, ControlLogix/GuardLogix/SoftLogix up to listed versions). Root cause: improper authenticati...

CVE-2012-6435

CVE-2012-6435 affects Rockwell Automation EtherNet/IP products (e.g., 1756-ENBT/ENBT, 1768-ENBT/EWEB, CompactLogix L32E/L35E, 1788-ENBT, 1794-AENTR, MicroLogix 1100/1400, and various ControlLogix/GuardLogix/SoftLogix platforms). The issue allows a CIP message from an unauthorized source to ports ...

CVE-2012-6440

CVE-2012-6440 affects Rockwell Automation EtherNet/IP products (e.g., 1756-ENBT/EWEB, 1768-ENBT/EWEB, CompactLogix L32E/L35E, 1788-ENBT, 1794-AENTR, MicroLogix 1100/1400, and pre‑20x controllers). The vulnerability arises from the Web server password authentication mechanism, enabling MitM and Re...

CVE-2012-6441

CVE-2012-6441 is an information-exposure vulnerability affecting Rockwell Automation EtherNet/IP products, including 1756-ENBT/1768-ENBT/1768-EWEB modules, CompactLogix/L18-L19 controllers, GuardLogix, SoftLogix, MicroLogix 1100/1400, and associated NICs and adapters. The issue arises when the de...

CVE-2012-6436

CVE-2012-6436 is a buffer overflow vulnerability in Rockwell Automation EtherNet/IP products. The issue arises when the device processes malformed CIP packets sent to ports 2222 or 44818 (TCP/UDP), potentially causing CPU crash and loss of availability. Affected products include various Rockwell ...

CVE-2012-6439

CVE-2012-6439 affects Rockwell Automation EtherNet/IP products (e.g., 1756-ENBT/EWEB; 1768-ENBT/EWEB; CompactLogix L32E/L35E; 1788-ENBT FLEXLogix; 1794-AENTR; and various ControlLogix/GuardLogix/SoftLogix/MicroLogix series). Root cause: improper access control for CIP messages that modify configu...

CVE-2012-6438

CVE-2012-6438 is a vulnerability in Rockwell Automation EtherNet/IP devices where the NIC buffer may overflow when receiving malformed CIP packets. Affected components include 1756-ENBT/1768-ENBT/EWEB modules, CompactLogix L32E/L35E, 1788-ENBT FLEXLogix, 1794-AENTR, and various ControlLogix/Guard...