Authentication Flaw in Rockwell Automation EtherNet/IP Products
CVE-2012-6437

Currently unrated

Key Information:

Vendor: Rockwell Automation
Status: 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb Communication Modules; Compactlogix L32e And L35e Controllers; 1788-enbt Flexlogix Adapter; 1794-aentr Flex I/o Ethernet/ip Adapter
Vendor: CVE Published:; 24 January 2013

🔔 Create Rockwell Automation Vulnerability Alert

What is CVE-2012-6437?

Rockwell Automation's EtherNet/IP products, including various communication modules and controllers, are susceptible to an authentication vulnerability that fails to adequately secure firmware updates. This flaw enables remote attackers to exploit the system by executing arbitrary code via a malicious firmware update. Organizations using these affected products are urged to assess their firmware update processes and implement security measures to mitigate potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch