Buffer Overflow Vulnerability in Rockwell Automation EtherNet/IP Products
CVE-2012-6436
Currently unrated
Key Information:
- Vendor
Rockwell Automation
- Status
- Vendor
- CVE Published:
- 24 January 2013
What is CVE-2012-6436?
The buffer overflow vulnerability in Rockwell Automation EtherNet/IP products can be exploited by remote attackers through the sending of malformed CIP packets, leading to significant disruptions like CPU crashes and communication outages. This poses a serious risk to the operational integrity of affected control systems, requiring prompt attention to security measures.
Affected Version(s)
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules All
1788-ENBT FLEXLogix adapter All
1794-AENTR FLEX I/O EtherNet/IP adapter All