CVE-2012-6437: rockwell automation 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb communication modules Improper Authentication

Vulnerability summary

CVE-2012-6437 is a high (CVSS 10.0) Improper Authentication vulnerability in rockwell automation 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb communication modules. EPSS estimates a 7.85% chance of exploitation in the next 30 days, higher than 94.6% of scored vulnerabilities.

Timeline

1. 24-01-2013
   PublishedVulnerability first disclosed.
2. 03-06-2026
   Last modifiedVulnerability information updated.

Description

The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause loss of availability, integrity, and confidentiality and a disruption in communications with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.