Known vulnerabilities in Rockwell Automation MicroLogix
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2012-6440 | The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack | 9.3 Not rated | Jan 24, 2013 |
| CVE-2012-6439 | When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port… | 8.5 Not rated | Jan 24, 2013 |
| CVE-2012-6438 | The device does not properly validate the data being sent to the buffer | 7.8 Not rated | Jan 24, 2013 |
| CVE-2012-6437 | The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware… | 10.0 Not rated | Jan 24, 2013 |
| CVE-2012-6436 | The device does not properly validate the data being sent to the buffer | 7.8 Not rated | Jan 24, 2013 |
| CVE-2012-6435 | When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port… | 7.8 Not rated | Jan 24, 2013 |
| CVE-2012-6442 | When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port… | 7.8 Not rated | Jan 24, 2013 |
| CVE-2012-6441 | An information exposure of confidential information results when the device receives a specially crafted CIP packet to… | 5.0 Not rated | Jan 24, 2013 |
Other Rockwell Automation products
Arena® 21
ArmorStart® LT 11
Arena Simulation 11
ArmorStart ST 10
FactoryTalk AssetCentre 9
1794-AENTR FLEX I/O EtherNet/IP adapter 8
ControlLogix, CompactLogix, GuardLogix, and SoftLogix 8
ControlLogix and GuardLogix controllers 8
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules 8
1788-ENBT FLEXLogix adapter 8
CompactLogix and SoftLogix controllers 8
CompactLogix L32E and L35E controllers 8