Authentication Flaw in Rockwell Automation EtherNet/IP Products
CVE-2012-6437
Currently unrated
Key Information:
- Vendor
Rockwell Automation
- Status
- Vendor
- CVE Published:
- 24 January 2013
What is CVE-2012-6437?
Rockwell Automation's EtherNet/IP products, including various communication modules and controllers, are susceptible to an authentication vulnerability that fails to adequately secure firmware updates. This flaw enables remote attackers to exploit the system by executing arbitrary code via a malicious firmware update. Organizations using these affected products are urged to assess their firmware update processes and implement security measures to mitigate potential attacks.
Affected Version(s)
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules All
1788-ENBT FLEXLogix adapter All
1794-AENTR FLEX I/O EtherNet/IP adapter All