CVE:CVE-2012-6442
CNNVD:CNNVD-201301-259
Rockwell Automation ControlLogix提供工业自动化控制和信息产品。
Rockwell Automation ControlLogix在处理某些来自未授权或意外源的有效CIP报文时存在安全漏洞，当向端口2222/TCP，Port 2222/UDP，Port 44818/TCP，Port 44818/UDP发送特制的CIP报文，重置产品时，此漏洞可造成CPU拒绝服务。
solution:Upgrade rockwellautomation ethernet/ip_firmware to a higher version than -; Upgrade rockwellautomation compactlogix_firmware to a higher version than -,18,and avoid the version 18; Upgrade rockwellautomation flexlogix_firmware to a higher version than -; Upgrade rockwellautomation flex_i/o_ethernet/ip__firmware to a higher version than -; Upgrade rockwellautomation micrologix_firmware to a higher version than -; Upgrade rockwellautomation compactlogix_controllers_firmware to a higher version than 19,and avoid the version 19; Upgrade rockwellautomation controllogix_controllers_firmware to a higher version than 20,and avoid the version 20; Upgrade rockwellautomation controllogix_firmware to a higher version than 18,and avoid the version 18; Upgrade rockwellautomation guardlogix_controllers_firmware to a higher version than 20,and avoid the version 20; Upgrade rockwellautomation guardlogix_firmware to a higher version than 18,and avoid the version 18; Upgrade rockwellautomation softlogix_controllers_firmware to a higher version than 19,and avoid the version 19; Upgrade rockwellautomation softlogix_firmware to a higher version than 18,and avoid the version 18