CVE-2012-6441
Rockwell Automation ControlLogix PLC Information Exposure
CVE-2012-6441 is a vulnerability (CVSS 5.0) in Rockwell Automation 1788-enbt Flexlogix Adapter, published January 24, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 57.1%, the 99th percentile. No source names a fixed version.
An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality.
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
Exploit likelihood
What each source reports
CVE List Score used
Rockwell Automation ControlLogix PLC Information Exposure
An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality.
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
- Record
CVE-2012-6441- CVSS 2.0
- 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2012-6294
An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality.
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
- Record
EUVD-2012-6294- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-qwf3-gf6f-rrw8 No score
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB...
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 allow remote attackers to obtain sensitive information via a crafted CIP packet.
- Record
GHSA-qwf3-gf6f-rrw8- Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality.
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
- Record
CVE-2012-6441- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
- rockwell automation 1788-enbt flexlogix adapter
- rockwell automation 1794-aentr flex i/o ethernet/ip adapter
- rockwell automation compactlogix l32e and l35e controllers
- rockwell automation micrologix
- rockwell automation 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb communication modules
- rockwell automation compactlogix and softlogix controllers
- rockwell automation controllogix and guardlogix controllers
- rockwell automation controllogix, compactlogix, guardlogix, and softlogix
- rockwellautomation 1756-enbt
- rockwellautomation 1756-eweb
- rockwellautomation 1768-enbt
- rockwellautomation 1768-eweb
Show 13 moreShow less
- rockwellautomation compactlogix
- rockwellautomation compactlogix controllers
- rockwellautomation controllogix
- rockwellautomation controllogix controllers
- rockwellautomation guardlogix
- rockwellautomation guardlogix controllers
- rockwellautomation micrologix
- rockwellautomation softlogix
- rockwellautomation softlogix controllers
- rockwellautomation 1794-aentr flex i\/o ethernet\/ip adapter
- rockwellautomation compactlogix l32e controller
- rockwellautomation compactlogix l35e controller
- rockwellautomation flexlogix 1788-enbt adapter
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-02 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
cisa.gov/news-events/ics-advisories/icsa-13-011-03
rockwellautomation.custhelp.com/app/answers/detail/a_id/470154
us-cert.gov/control_systems/pdf/ICSA-13-011-03.pdf
nvd.nist.gov/vuln/detail/CVE-2012-6441
github.com/advisories/GHSA-qwf3-gf6f-rrw8