CVE-2012-6442

Rockwell Automation EtherNet/IP Firmware - Denial of Service via Unauthorized CIP Message

Title source: llm
STIX 2.1

Description

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the product to reset, a DoS can occur. This situation could cause loss of availability and a disruption of communication with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

Scores

EPSS 0.1027
EPSS Percentile 93.3%

Details

CWE
CWE-119 CWE-284
Status published
Products (22)
Rockwell Automation/1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules All
Rockwell Automation/1788-ENBT FLEXLogix adapter All
Rockwell Automation/1794-AENTR FLEX I/O EtherNet/IP adapter All
Rockwell Automation/CompactLogix and SoftLogix controllers < 19
Rockwell Automation/CompactLogix L32E and L35E controllers All
Rockwell Automation/ControlLogix and GuardLogix controllers < 20
Rockwell Automation/ControlLogix, CompactLogix, GuardLogix, and SoftLogix < 18
Rockwell Automation/MicroLogix 1100
Rockwell Automation/MicroLogix 1400
rockwellautomation/compactlogix_controllers_firmware 19
... and 12 more
Published Jan 24, 2013
Tracked Since Feb 18, 2026