Skip to main content

Ab Micrologix Controller CVE-2012-4690

HIGH
Configuration (CWE-16)
2012-12-08 ics-cert@hq.dhs.gov
Denial Of Service Rockwell Ab Micrologix Controller Plc 5 Controller Slc 500 Controller
7.1
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:N/A:C
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
None
Availability
C

Lifecycle Timeline

1
CVE Published
Dec 08, 2012 - 15:55 cve.org
HIGH 7.1

DescriptionCVE.org

Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits.

AnalysisAI

Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-16. Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits. Affected products include: Rockwellautomation Ab Micrologix Controller, Rockwellautomation Plc-5 Controller, Rockwellautomation Slc 500 Controller.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ab Micrologix Controller

View all
CVE-2014-5410 HIGH
7.1 Oct 03

The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 14

Same weakness CWE-16 – Configuration

View all
CVE-2012-5613 MEDIUM POC
6.0
CVE-2017-6639 CRITICAL
9.8
CVE-2022-43516 CRITICAL POC
9.8
CVE-2014-8657 MEDIUM POC
5.0
CVE-2012-0147 MEDIUM
5.0
CVE-2012-6050 MEDIUM POC
6.4
CVE-2014-8652 MEDIUM POC
5.0
CVE-2019-16760 HIGH POC
7.5

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2012-4690 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy