Rockwell Automation ControlLogix CVE-2012-6439 Denial of Service Vulnerability

Bugtraq ID:	57308
Class:	Design Error
CVE:	CVE-2012-6439
Remote:	Yes
Local:	No
Published:	Jan 11 2013 12:00AM
Updated:	Jan 11 2013 12:00AM
Credit:	Rubén Santamarta
Vulnerable:	Rockwell Automation SoftLogix 19 Rockwell Automation SoftLogix 18 Rockwell Automation Micrologix 1400 0 Rockwell Automation Micrologix 1100 0 Rockwell Automation GuardLogix 20 Rockwell Automation GuardLogix 18 Rockwell Automation ControlLogix 20 Rockwell Automation ControlLogix 18 Rockwell Automation CompactLogix L35E Rockwell Automation CompactLogix L32E Rockwell Automation CompactLogix 19 Rockwell Automation CompactLogix 18 Rockwell Automation 1794-AENTR 0 Rockwell Automation 1788-ENBT 0 Rockwell Automation 1768-EWEB 0 Rockwell Automation 1768-ENBT 0 Rockwell Automation 1756-ENBT 0 Rockwell Automation 1756-EN2T Series B 0 Rockwell Automation Controllogix 0
Not Vulnerable:

Rockwell Automation ControlLogix CVE-2012-6439 Denial of Service Vulnerability

Rockwell Automation ControlLogix is prone to a remote denial-of-service vulnerability.

An attacker can exploit these issues to crash the affected application, denying service to legitimate users.

Rockwell Automation ControlLogix CVE-2012-6439 Denial of Service Vulnerability

An attacker can use readily available tools to exploit this issue.

Rockwell Automation ControlLogix CVE-2012-6439 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more details.

Rockwell Automation ControlLogix CVE-2012-6439 Denial of Service Vulnerability

References:

• Rockwell Automation Homepage (Rockwell Automation)
  
• ICSA-13-011-03�??ROCKWELL AUTOMATION CONTROLLOGIX MULTIPLE PLC VULNERABILITIES (ICS-CERT)