Sign-up

ID

VAR-201301-0157


CVE

CVE-2012-6440


TITLE

Rockwell Automation ControlLogix Replay Vulnerability

Trust: 0.8

sources: IVD: 207536e4-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-00292

DESCRIPTION

The web-server password-authentication functionality in Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 allows man-in-the-middle attackers to conduct replay attacks via HTTP traffic. plural Rockwell Automation Product Web The server password authentication function contains a vulnerability that allows replay attacks to be performed.Man-in-the-middle attacks (man-in-the-middle attack) By HTTP Through traffic, replay attacks can be performed. Rockwell Automation MicroLogix is a programmable controller platform. Rockwell's products are affected by this vulnerability: all EtherNet/IP products that comply with CIP and EtherNet/IP specifications. Attackers can exploit this vulnerability to bypass certain security restrictions, perform unauthorized actions; which may aid in further attacks

Trust: 2.7

sources: NVD: CVE-2012-6440 // JVNDB: JVNDB-2013-001268 // CNVD: CNVD-2013-00292 // BID: 57315 // IVD: 207536e4-2353-11e6-abef-000c29c66e3d // VULHUB: VHN-59721

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 207536e4-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-00292

AFFECTED PRODUCTS

vendor:rockwellautomationmodel:flexlogix 1788-enbt adapterscope:eqversion: -

Trust: 1.6

vendor:rockwellautomationmodel:1794-aentr flex i\/o ethernet\/ip adapterscope:eqversion: -

Trust: 1.6

vendor:rockwellautomationmodel:1756-ewebscope:eqversion: -

Trust: 1.0

vendor:rockwellautomationmodel:controllogixscope:lteversion:18

Trust: 1.0

vendor:rockwellautomationmodel:compactlogix l35e controllerscope:eqversion: -

Trust: 1.0

vendor:rockwellautomationmodel:1768-ewebscope:eqversion: -

Trust: 1.0

vendor:rockwellautomationmodel:compactlogix controllersscope:lteversion:19

Trust: 1.0

vendor:rockwellautomationmodel:guardlogix controllersscope:lteversion:20

Trust: 1.0

vendor:rockwellautomationmodel:controllogix controllersscope:lteversion:20

Trust: 1.0

vendor:rockwellautomationmodel:compactlogixscope:lteversion:18

Trust: 1.0

vendor:rockwellautomationmodel:guardlogixscope:lteversion:18

Trust: 1.0

vendor:rockwellautomationmodel:micrologixscope:lteversion:1400

Trust: 1.0

vendor:rockwellautomationmodel:softlogixscope:lteversion:18

Trust: 1.0

vendor:rockwellautomationmodel:softlogix controllersscope:lteversion:19

Trust: 1.0

vendor:rockwellautomationmodel:1756-enbtscope:eqversion: -

Trust: 1.0

vendor:rockwellautomationmodel:1768-enbtscope:eqversion: -

Trust: 1.0

vendor:rockwellautomationmodel:micrologixscope:lteversion:1100

Trust: 1.0

vendor:rockwellautomationmodel:compactlogix l32e controllerscope:eqversion: -

Trust: 1.0

vendor:rockwell automationmodel:1756-enbtscope: - version: -

Trust: 0.8

vendor:rockwell automationmodel:1756-ewebscope: - version: -

Trust: 0.8

vendor:rockwell automationmodel:1768-enbtscope: - version: -

Trust: 0.8

vendor:rockwell automationmodel:1768-ewebscope: - version: -

Trust: 0.8

vendor:rockwell automationmodel:compactlogix l32e controllerscope: - version: -

Trust: 0.8

vendor:rockwell automationmodel:compactlogix l35e controllerscope: - version: -

Trust: 0.8

vendor:rockwell automationmodel:compactlogix controllerscope:lteversion:18

Trust: 0.8

vendor:rockwell automationmodel:compactlogix controllerscope:lteversion:19

Trust: 0.8

vendor:rockwell automationmodel:controllogix controllerscope:lteversion:18

Trust: 0.8

vendor:rockwell automationmodel:controllogix controllerscope:lteversion:20

Trust: 0.8

vendor:rockwell automationmodel:flex i/o ethernet/ip adapter 1794-aentrscope: - version: -

Trust: 0.8

vendor:rockwell automationmodel:flexlogix 1788-enbtscope: - version: -

Trust: 0.8

vendor:rockwell automationmodel:guardlogix controllerscope:lteversion:18

Trust: 0.8

vendor:rockwell automationmodel:guardlogix controllerscope:lteversion:20

Trust: 0.8

vendor:rockwell automationmodel:micrologixscope:eqversion:1100

Trust: 0.8

vendor:rockwell automationmodel:micrologixscope:eqversion:1400

Trust: 0.8

vendor:rockwell automationmodel:softlogix controllerscope:lteversion:18

Trust: 0.8

vendor:rockwell automationmodel:softlogix controllerscope:lteversion:19

Trust: 0.8

vendor:rockwellmodel:automation controllogixscope: - version: -

Trust: 0.6

vendor:rockwellmodel:automation micrologixscope:eqversion:1100

Trust: 0.6

vendor:rockwellmodel:automation micrologixscope:eqversion:1400

Trust: 0.6

vendor:rockwellautomationmodel:guardlogix controllersscope:eqversion:20

Trust: 0.6

vendor:rockwellautomationmodel:micrologixscope:eqversion:1100

Trust: 0.6

vendor:rockwellautomationmodel:softlogixscope:eqversion:18

Trust: 0.6

vendor:rockwellautomationmodel:guardlogixscope:eqversion:18

Trust: 0.6

vendor:rockwellautomationmodel:controllogix controllersscope:eqversion:20

Trust: 0.6

vendor:rockwellautomationmodel:compactlogix controllersscope:eqversion:19

Trust: 0.6

vendor:rockwellautomationmodel:micrologixscope:eqversion:1400

Trust: 0.6

vendor:rockwellautomationmodel:softlogix controllersscope:eqversion:19

Trust: 0.6

vendor:micrologixmodel: - scope:eqversion:*

Trust: 0.4

vendor:rockwellmodel:automation softlogixscope:eqversion:19

Trust: 0.3

vendor:rockwellmodel:automation softlogixscope:eqversion:18

Trust: 0.3

vendor:rockwellmodel:automation micrologixscope:eqversion:14000

Trust: 0.3

vendor:rockwellmodel:automation micrologixscope:eqversion:11000

Trust: 0.3

vendor:rockwellmodel:automation guardlogixscope:eqversion:20

Trust: 0.3

vendor:rockwellmodel:automation guardlogixscope:eqversion:18

Trust: 0.3

vendor:rockwellmodel:automation compactlogix l35escope: - version: -

Trust: 0.3

vendor:rockwellmodel:automation compactlogix l32escope: - version: -

Trust: 0.3

vendor:rockwellmodel:automation compactlogixscope:eqversion:19

Trust: 0.3

vendor:rockwellmodel:automation compactlogixscope:eqversion:18

Trust: 0.3

vendor:rockwellmodel:automation 1794-aentrscope:eqversion:0

Trust: 0.3

vendor:rockwellmodel:automation 1788-enbtscope:eqversion:0

Trust: 0.3

vendor:rockwellmodel:automation 1768-ewebscope:eqversion:0

Trust: 0.3

vendor:rockwellmodel:automation 1768-enbtscope:eqversion:0

Trust: 0.3

vendor:rockwellmodel:automation 1756-enbtscope:eqversion:0

Trust: 0.3

vendor:rockwellmodel:automation 1756-en2t series bscope:eqversion:0

Trust: 0.3

vendor:controllogix controllersmodel: - scope:eqversion:*

Trust: 0.2

vendor:guardlogix controllersmodel: - scope:eqversion:*

Trust: 0.2

vendor:softlogix controllersmodel: - scope:eqversion:*

Trust: 0.2

vendor:1756 enbtmodel: - scope:eqversion: -

Trust: 0.2

vendor:1756 ewebmodel: - scope:eqversion: -

Trust: 0.2

vendor:1768 enbtmodel: - scope:eqversion: -

Trust: 0.2

vendor:1768 ewebmodel: - scope:eqversion: -

Trust: 0.2

vendor:1794 aentr flex i o ethernet ip adaptermodel: - scope:eqversion: -

Trust: 0.2

vendor:compactlogixmodel: - scope:eqversion:*

Trust: 0.2

vendor:compactlogix controllersmodel: - scope:eqversion:*

Trust: 0.2

vendor:compactlogix l32e controllermodel: - scope:eqversion: -

Trust: 0.2

vendor:compactlogix l35e controllermodel: - scope:eqversion: -

Trust: 0.2

vendor:controllogixmodel: - scope:eqversion:*

Trust: 0.2

vendor:flexlogix 1788 enbt adaptermodel: - scope:eqversion: -

Trust: 0.2

vendor:guardlogixmodel: - scope:eqversion:*

Trust: 0.2

vendor:softlogixmodel: - scope:eqversion:*

Trust: 0.2

sources: IVD: 207536e4-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-00292 // BID: 57315 // JVNDB: JVNDB-2013-001268 // CNNVD: CNNVD-201301-461 // NVD: CVE-2012-6440

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-6440
value: HIGH

Trust: 1.0

NVD: CVE-2012-6440
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201301-461
value: CRITICAL

Trust: 0.6

IVD: 207536e4-2353-11e6-abef-000c29c66e3d
value: CRITICAL

Trust: 0.2

VULHUB: VHN-59721
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2012-6440
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

IVD: 207536e4-2353-11e6-abef-000c29c66e3d
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-59721
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: IVD: 207536e4-2353-11e6-abef-000c29c66e3d // VULHUB: VHN-59721 // JVNDB: JVNDB-2013-001268 // CNNVD: CNNVD-201301-461 // NVD: CVE-2012-6440

PROBLEMTYPE DATA

problemtype:CWE-287

Trust: 1.9

sources: VULHUB: VHN-59721 // JVNDB: JVNDB-2013-001268 // NVD: CVE-2012-6440

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201301-461

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-201301-461

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-001268

PATCH
title:Top Pageurl:http://www.rockwellautomation.com/
Trust: 0.8
title:Partnerurl:http://jp.rockwellautomation.com/applications/gs/ap/gsjp.nsf/pages/partner
Trust: 0.8
title:Top Pageurl:http://jp.rockwellautomation.com/
Trust: 0.8
title:Patch for Rockwell Automation ControlLogix Replay Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/29251
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2013-00292 // 
            
            
            
            JVNDB: JVNDB-2013-001268

EXTERNAL IDS
db:NVDid:CVE-2012-6440
Trust: 3.6
db:ICS CERTid:ICSA-13-011-03
Trust: 3.4
db:BIDid:57315
Trust: 1.0
db:CNNVDid:CNNVD-201301-461
Trust: 0.9
db:CNVDid:CNVD-2013-00292
Trust: 0.8
db:JVNDBid:JVNDB-2013-001268
Trust: 0.8
db:IVDid:207536E4-2353-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:VULHUBid:VHN-59721
Trust: 0.1
sources:
            
            
            IVD: 207536e4-2353-11e6-abef-000c29c66e3d // 
            
            
            
            CNVD: CNVD-2013-00292 // 
            
            
            
            VULHUB: VHN-59721 // 
            
            
            
            BID: 57315 // 
            
            
            
            JVNDB: JVNDB-2013-001268 // 
            
            
            
            CNNVD: CNNVD-201301-461 // 
            
            
            
            NVD: CVE-2012-6440

REFERENCES
url:http://www.us-cert.gov/control_systems/pdf/icsa-13-011-03.pdf
Trust: 3.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-6440
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-6440
Trust: 0.8
url:http://www.securityfocus.com/bid/57315
Trust: 0.6
url:http://www.rockwellautomation.com/
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2013-00292 // 
            
            
            
            VULHUB: VHN-59721 // 
            
            
            
            BID: 57315 // 
            
            
            
            JVNDB: JVNDB-2013-001268 // 
            
            
            
            CNNVD: CNNVD-201301-461 // 
            
            
            
            NVD: CVE-2012-6440

CREDITS
Rockwell Automation engineers
Trust: 0.9
sources:
            
            
            BID: 57315 // 
            
            
            
            CNNVD: CNNVD-201301-461

SOURCES
db:IVDid:207536e4-2353-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2013-00292
db:VULHUBid:VHN-59721
db:BIDid:57315
db:JVNDBid:JVNDB-2013-001268
db:CNNVDid:CNNVD-201301-461
db:NVDid:CVE-2012-6440

LAST UPDATE DATE
2024-08-14T14:14:27.898000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2013-00292date:2013-05-25T00:00:00
db:VULHUBid:VHN-59721date:2013-01-25T00:00:00
db:BIDid:57315date:2013-01-11T00:00:00
db:JVNDBid:JVNDB-2013-001268date:2013-01-28T00:00:00
db:CNNVDid:CNNVD-201301-461date:2013-01-24T00:00:00
db:NVDid:CVE-2012-6440date:2013-01-25T16:31:13.460

SOURCES RELEASE DATE
db:IVDid:207536e4-2353-11e6-abef-000c29c66e3ddate:2013-01-17T00:00:00
db:CNVDid:CNVD-2013-00292date:2013-01-17T00:00:00
db:VULHUBid:VHN-59721date:2013-01-24T00:00:00
db:BIDid:57315date:2013-01-11T00:00:00
db:JVNDBid:JVNDB-2013-001268date:2013-01-28T00:00:00
db:CNNVDid:CNNVD-201301-461date:2013-01-24T00:00:00
db:NVDid:CVE-2012-6440date:2013-01-24T21:55:01.697