CVE-2012-6437
The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.85%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause loss of availability, integrity, and confidentiality and a disruption in communications with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 7.85% probability · 95th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- rockwellautomation/controllogix controllers · rockwellautomation/guardlogix controllers · rockwellautomation/micrologix · rockwellautomation/softlogix controllers · rockwellautomation/1756-enbt · rockwellautomation/1756-eweb · rockwellautomation/1768-enbt · rockwellautomation/1768-eweb · rockwellautomation/1794-aentr flex i\/o ethernet\/ip adapter · rockwellautomation/compactlogix · rockwellautomation/compactlogix controllers · rockwellautomation/compactlogix l32e controller · rockwellautomation/compactlogix l35e controller · rockwellautomation/controllogix · rockwellautomation/flexlogix 1788-enbt adapter · rockwellautomation/guardlogix · rockwellautomation/softlogix
- Source
- ics-cert@hq.dhs.gov
EPSS 7.8% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154
- https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155
- https://rockwellautomation.custhelp.com/app/answers/detail/aid/470156
- https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-03
- http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdfUS Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.