Denial of Service Vulnerability in Rockwell Automation Communication Modules
CVE-2012-6435
Currently unrated
Key Information:
- Vendor
Rockwell Automation
- Status
- Vendor
- CVE Published:
- 24 January 2013
What is CVE-2012-6435?
Rockwell Automation EtherNet/IP products, including various communication modules and controllers, are susceptible to a denial of service attack. This vulnerability allows remote attackers to disrupt operations by sending a specific CIP message that instructs the affected device to stop logic execution, resulting in a control and communication outage. Users are advised to implement security measures to mitigate risks associated with this vulnerability.
Affected Version(s)
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules All
1788-ENBT FLEXLogix adapter All
1794-AENTR FLEX I/O EtherNet/IP adapter All