Rockwell Automation ControlLogix CVE-2012-6437 Security Bypass Vulnerability

Bugtraq ID:	57317
Class:	Design Error
CVE:	CVE-2012-6437
Remote:	Yes
Local:	No
Published:	Jan 11 2013 12:00AM
Updated:	Jan 11 2013 12:00AM
Credit:	Rubén Santamarta
Vulnerable:	Rockwell Automation SoftLogix 19 Rockwell Automation SoftLogix 18 Rockwell Automation Micrologix 1400 0 Rockwell Automation Micrologix 1100 0 Rockwell Automation GuardLogix 20 Rockwell Automation GuardLogix 18 Rockwell Automation CompactLogix L35E Rockwell Automation CompactLogix L32E Rockwell Automation CompactLogix 19 Rockwell Automation CompactLogix 18 Rockwell Automation 1794-AENTR 0 Rockwell Automation 1788-ENBT 0 Rockwell Automation 1768-EWEB 0 Rockwell Automation 1768-ENBT 0 Rockwell Automation 1756-ENBT 0 Rockwell Automation 1756-EN2T Series B 0
Not Vulnerable:

Rockwell Automation ControlLogix CVE-2012-6437 Security Bypass Vulnerability

Rockwell Automation ControlLogix is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication process and upload a new firmware image to the Ethernet card.

Rockwell Automation ControlLogix CVE-2012-6437 Security Bypass Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Rockwell Automation ControlLogix CVE-2012-6437 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Rockwell Automation ControlLogix CVE-2012-6437 Security Bypass Vulnerability

References:

• Rockwell Automation Homepage (Rockwell Automation)
  
• ICSA-13-011-03�??ROCKWELL AUTOMATION CONTROLLOGIX MULTIPLE PLC VULNERABILITIES (ICS-CERT)