What is the CVSS score of CVE-2012-6439?

CVE-2012-6439 has a CVSS 2.0 base score of 8.5 (High). CVSS vector: AV:N/AC:L/Au:N/C:N/I:P/A:C. EPSS exploitation probability: 0.6%.

Controllogix Controllers CVE-2012-6439

HIGH

Improper Access Control (CWE-284)

2013-01-24 ics-cert@hq.dhs.gov

Rockwell Authentication Bypass Controllogix Controllers Guardlogix Controllers Micrologix Softlogix Controllers 1756 Enbt 1756 Eweb 1768 Enbt 1768 Eweb 1794 Aentr Flex I O Ethernet Ip Adapter Compactlogix Compactlogix Controllers Compactlogix L32E Controller Compactlogix L35E Controller Controllogix Flexlogix 1788 Enbt Adapter Guardlogix Softlogix

8.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

8.5 HIGH

AV:N/AC:L/Au:N/C:N/I:P/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:P/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

Availability

Lifecycle Timeline

CVE Published

Jan 24, 2013 - 21:55 cve.org

HIGH 8.5

DescriptionCVE.org

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s configuration and network parameters, a DoS condition can occur. This situation could cause loss of availability and a disruption of communication with other connected devices.

Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

AnalysisAI

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s configuration and network parameters, a DoS condition can occur. This situation could cause loss of availability and a disruption of communication with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 Affected products include: Rockwellautomation Controllogix Controllers, Rockwellautomation Guardlogix Controllers, Rockwellautomation Micrologix, Rockwellautomation Softlogix Controllers, Rockwellautomation 1756-Enbt.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.