CVE-2012-6441
An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 57.1%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 57.15% probability · 99th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- rockwellautomation/controllogix controllers · rockwellautomation/guardlogix controllers · rockwellautomation/micrologix · rockwellautomation/softlogix controllers · rockwellautomation/1756-enbt · rockwellautomation/1756-eweb · rockwellautomation/1768-enbt · rockwellautomation/1768-eweb · rockwellautomation/1794-aentr flex i\/o ethernet\/ip adapter · rockwellautomation/compactlogix · rockwellautomation/compactlogix controllers · rockwellautomation/compactlogix l32e controller · rockwellautomation/compactlogix l35e controller · rockwellautomation/controllogix · rockwellautomation/flexlogix 1788-enbt adapter · rockwellautomation/guardlogix · rockwellautomation/softlogix
- Source
- ics-cert@hq.dhs.gov
EPSS 57.1% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154
- https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155
- https://rockwellautomation.custhelp.com/app/answers/detail/aid/470156
- https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-03
- http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdfUS Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.