kbrain

CVE-2012-6440

MEDIUM · CVSS 4.8EPSS 9.2%EU EUVD

The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the product’s Web server to view and alter product configuration and diagnostics information. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400

Key facts

CVSS score
4.8 (v3.1)
Severity
MEDIUM
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness (CWE)
CWE-287
EPSS score
9.2% (95th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2012-6293)
Published
January 24, 2013
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2012-6293 in the EU Vulnerability Database. Last updated in EUVD on June 3, 2026.

View on the EU Vulnerability Database

Affected products

  • rockwellautomation / 1756-enbt
  • rockwellautomation / 1756-eweb
  • rockwellautomation / 1768-enbt
  • rockwellautomation / 1768-eweb
  • rockwellautomation / 1794-aentr flex i/o ethernet/ip adapter
  • rockwellautomation / compactlogix
  • rockwellautomation / compactlogix controllers
  • rockwellautomation / compactlogix l32e controller
  • rockwellautomation / compactlogix l35e controller
  • rockwellautomation / controllogix
  • rockwellautomation / controllogix controllers
  • rockwellautomation / flexlogix 1788-enbt adapter
  • rockwellautomation / guardlogix
  • rockwellautomation / guardlogix controllers
  • rockwellautomation / micrologix
  • rockwellautomation / softlogix
  • rockwellautomation / softlogix controllers

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain