CVE-2012-4690
Published Dec 8, 2012
Last updated 11 years ago
Overview
- Description
- Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.1
- Impact score
- 6.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
- nvd@nist.gov
- CWE-16
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA98842B-9D09-4C37-AB34-4E9FA566BAD8"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C845DE9C-D4AF-4234-8DB6-1E335C909BAF"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1400:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFF2EF59-F451-490D-A7AF-E66D11493948"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D9F8B08-21FD-4D6B-9F5E-D3CA4A8F323C"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:plc-5_controller:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEDAA951-691B-4ADB-861D-854E6368F51A"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:slc_500_controller:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD6D98F4-9A0B-46A4-903B-09830C65D487"
}
],
"operator": "OR"
}
]
}
]