CVE-2012-6440: rockwell automation 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb communication modules Improper Authentication

Vulnerability summary

CVE-2012-6440 is a high (CVSS 9.3) Improper Authentication vulnerability in rockwell automation 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb communication modules. EPSS estimates a 9.26% chance of exploitation in the next 30 days, higher than 95.3% of scored vulnerabilities.

Timeline

1. 24-01-2013
   PublishedVulnerability first disclosed.
2. 03-06-2026
   Last modifiedVulnerability information updated.

Description

The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the product’s Web server to view and alter product configuration and diagnostics information. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.