Buffer Overflow Vulnerability in Rockwell Automation EtherNet/IP Communication Modules
CVE-2012-6438
Currently unrated
Key Information:
- Vendor
Rockwell Automation
- Status
- Vendor
- CVE Published:
- 24 January 2013
What is CVE-2012-6438?
A buffer overflow vulnerability has been identified in Rockwell Automation EtherNet/IP products, which affects numerous communication modules and controllers. Attackers can exploit this vulnerability by sending malformed CIP packets, potentially causing a denial of service. This may lead to a crash of the network interface card (NIC) and result in extended communication outages, compromising the operational integrity of affected systems.
Affected Version(s)
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules All
1788-ENBT FLEXLogix adapter All
1794-AENTR FLEX I/O EtherNet/IP adapter All