CVE:CVE-2012-6436
CNNVD:CNNVD-201301-257
Rockwell Automation ControlLogix提供工业自动化控制和信息产品。
Rockwell Automation ControlLogix在处理某些发送到缓冲区的数据时存在安全漏洞，当向端口2222/TCP，Port 2222/UDP，Port 44818/TCP，Port 44818/UDP发送特制的CIP报文时，此漏洞可造成缓冲区溢出，造成CPU拒绝服务。
solution:Upgrade rockwellautomation controllogix_controllers to a higher version than 20,and avoid the version (,20]; Upgrade rockwellautomation guardlogix_controllers to a higher version than 20,and avoid the version (,20]; Upgrade rockwellautomation micrologix to a higher version than 1100,1400,and avoid the version (,1100],(,1400]; Upgrade rockwellautomation softlogix_controllers to a higher version than 19,and avoid the version (,19]; Upgrade rockwellautomation 1756-enbt to a higher version than -; Upgrade rockwellautomation 1756-eweb to a higher version than -; Upgrade rockwellautomation 1768-enbt to a higher version than -; Upgrade rockwellautomation 1768-eweb to a higher version than -; Upgrade rockwellautomation 1794-aentr_flex_i/o_ethernet/ip_adapter to a higher version than -; Upgrade rockwellautomation compactlogix to a higher version than 18,and avoid the version (,18]; Upgrade rockwellautomation compactlogix_controllers to a higher version than 19,and avoid the version (,19]; Upgrade rockwellautomation compactlogix_l32e_controller to a higher version than -; Upgrade rockwellautomation compactlogix_l35e_controller to a higher version than -; Upgrade rockwellautomation controllogix to a higher version than 18,and avoid the version (,18]; Upgrade rockwellautomation flexlogix_1788-enbt_adapter to a higher version than -; Upgrade rockwellautomation guardlogix to a higher version than 18,and avoid the version (,18]; Upgrade rockwellautomation softlogix to a higher version than 18,and avoid the version (,18]