virus logo Intrusion Prevention

Rockwell.Automation.EtherNet.IP.CIP.Commands.DoS

description-logoDescription

This indicates an attack attempt against multiple Denial of Service vulnerabilities in Rockwell Automation EtherNet/IP.
The vulnerability is caused by an error when the vulnerable software handles malformed EtherNet/IP commands or CIP commands. It allows a remote attacker to crash vulnerable systems via sending a crafted packet to port 44818.

affected-products-logoAffected Products

Rockwell Automation EtherNet/IP

Impact logoImpact

Denial of Service: Remote attackers can crash vulnerable systems.

recomended-action-logoRecommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

References

http://www.idappcom.com/db/?5938
ID 32110
Created Jun 19, 2012
Updated May 02, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2012-6435 CVE-2012-6436 CVE-2012-6438 CVE-2012-6442 CVE-2012-6441
Exploit Prediction Score 2.09%
Default Action drop
Active
Affected OS Windows
Affected App SCADA