Rockwellautomation 1756-Eweb vulnerabilities

7 CVEs affecting Rockwellautomation 1756-Eweb, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-6441, published 2013-01-24.

More from Rockwellautomation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-6441, published 2013-01-24. Medium severity, CVSS 5.0. EPSS: 57.1% chance of exploitation in the next 30 days. An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful…
• CVE-2012-6435, published 2013-01-24. High severity, CVSS 7.5. EPSS: 33.5% chance of exploitation in the next 30 days. When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the CPU to stop logic…
• CVE-2012-6438, published 2013-01-24. High severity, CVSS 7.5. EPSS: 27.4% chance of exploitation in the next 30 days. The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates…
• CVE-2012-6436, published 2013-01-24. High severity, CVSS 7.5. EPSS: 27.1% chance of exploitation in the next 30 days. The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates…
• CVE-2012-6439, published 2013-01-24. High severity, CVSS 8.5. EPSS: 23.2% chance of exploitation in the next 30 days. When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s…
• CVE-2012-6440, published 2013-01-24. Medium severity, CVSS 4.8. EPSS: 9.3% chance of exploitation in the next 30 days. The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the…
• CVE-2012-6437, published 2013-01-24. Critical severity, CVSS 9.8. EPSS: 7.8% chance of exploitation in the next 30 days. The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image.…