CVE:CVE-2012-6437
CNNVD:CNNVD-201301-460
Rockwell Automation ControlLogix提供工业自动化控制和信息产品。
Rockwell Automation ControlLogix中存在安全绕过漏洞。攻击者利用该漏洞绕过身份验证进程，上传新的固件映像到以太网卡。
solution:Upgrade rockwellautomation controllogix_controllers to a higher version than 20,and avoid the version (,20]; Upgrade rockwellautomation guardlogix_controllers to a higher version than 20,and avoid the version (,20]; Upgrade rockwellautomation micrologix to a higher version than 1100,1400,and avoid the version (,1100],(,1400]; Upgrade rockwellautomation softlogix_controllers to a higher version than 19,and avoid the version (,19]; Upgrade rockwellautomation 1756-enbt to a higher version than -; Upgrade rockwellautomation 1756-eweb to a higher version than -; Upgrade rockwellautomation 1768-enbt to a higher version than -; Upgrade rockwellautomation 1768-eweb to a higher version than -; Upgrade rockwellautomation 1794-aentr_flex_i/o_ethernet/ip_adapter to a higher version than -; Upgrade rockwellautomation compactlogix to a higher version than 18,and avoid the version (,18]; Upgrade rockwellautomation compactlogix_controllers to a higher version than 19,and avoid the version (,19]; Upgrade rockwellautomation compactlogix_l32e_controller to a higher version than -; Upgrade rockwellautomation compactlogix_l35e_controller to a higher version than -; Upgrade rockwellautomation controllogix to a higher version than 18,and avoid the version (,18]; Upgrade rockwellautomation flexlogix_1788-enbt_adapter to a higher version than -; Upgrade rockwellautomation guardlogix to a higher version than 18,and avoid the version (,18]; Upgrade rockwellautomation softlogix to a higher version than 18,and avoid the version (,18]