deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3364
Published: 2013-01-22
Description: Multiple stack-based buffer overflows in the Near Field Communication Controller Interface (NCI) in the Linux kernel before 3.4.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via incoming frames with crafted length fields.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=67de956ff5dc1d4f321e16cfbd63f5be3b691b43; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]7784&w=2; http://ubuntu.com/usn/usn-1529-1
CVE: CVE-2012-4414
Published: 2013-01-22
Description: Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to the binary log.  NOTE: as of 20130116, Oracle has not commented on claims from a downstream vendor that the fix in MySQL 5.5.29 is incomplete.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://bugs.mysql.com/bug.php?id=66550; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html
CVE: CVE-2012-4461
Published: 2013-01-22
Description: The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
CVSS Score: 1.9 (LOW)
References: http://article.gmane.org/gmane.comp.emulators.kvm.devel/100742; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git%3Ba=commit%3Bh=6d1068b3a98519247d8ba4ec85cd40ac136dbdf9; http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
CVE: CVE-2012-4918
Published: 2013-01-22
Description: Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man-in-the-Middle (MITM) attack.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/89070; http://secunia.com/advisories/51366; http://www.securityfocus.com/bid/57225
CVE: CVE-2012-5616
Published: 2013-01-22
Description: Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain (1) the SSH private key as recorded by the createSSHKeyPair API, (2) the password of an added host as recorded by the AddHost API, or the password of an added VM as recorded by the (3) DeployVM or (4) ResetPasswordForVM API.
CVSS Score: 1.5 (LOW)
CWE: CWE-255
References: http://mail-archives.apache.org/mod_mbox/incubator-cloudstack-users/201301.mbox/%3C1BD2169F-BBFE-4E27-B50F-F17D7D08B565%40stratosec.co%3E; http://osvdb.org/89070; http://osvdb.org/89146
CVE: CVE-2012-6096
Published: 2013-01-22
Description: Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2012-December/089125.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00033.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00060.html
CVE: CVE-2012-6315
Published: 2013-01-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-0209.  Reason: This candidate is a reservation duplicate of CVE-2013-0209.  Notes: All CVE users should reference CVE-2013-0209 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-0209
Published: 2013-01-23
Description: lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injection attack against the core_drop_meta_for_table function, leading to execution of arbitrary Perl code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://openwall.com/lists/oss-security/2013/01/22/3; http://www.movabletype.org/2013/01/movable_type_438_patch.html; http://www.sec-1.com/blog/?p=402
CVE: CVE-2011-4618
Published: 2013-01-24
Description: Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0119.html; http://plugins.trac.wordpress.org/changeset?reponame=&new=466102%40advanced-text-widget&old=465828%40advanced-text-widget; http://wordpress.org/extend/plugins/advanced-text-widget/changelog/
CVE: CVE-2012-1922
Published: 2013-01-24
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of administrators for requests that modify settings for (1) Mac Filtering via admin/formFilter, (2) IP/Port Filtering via formFilter, (3) Port Forwarding via formPortFw, (4) Wireless Access Control via admin/formWlAc, (5) Wi-Fi Protected Setup via formWsc, (6) URL Blocking Filter via formURL, (7) Domain Blocking Filter via formDOMAINBLK, and (8) IP Address ACL Filter via admin/formACL in goform/, different vectors than CVE-2012-1921.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.webapp-security.com/2012/03/sitecom-wlm-2501-multiple-csrf-vulnerabilities; http://www.webapp-security.com/wp-content/uploads/2012/03/Sitecom-WLM-2501-new-Multiple-CSRF-Vulnerabilities-1.txt; http://www.webapp-security.com/2012/03/sitecom-wlm-2501-multiple-csrf-vulnerabilities
CVE: CVE-2012-2099
Published: 2013-01-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) search field, or the (2) Author or (3) select_sort parameters in an advanced search.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-03/0046.html; http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt; http://www.openwall.com/lists/oss-security/2012/04/12/12
CVE: CVE-2012-6085
Published: 2013-01-24
Description: The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commitdiff%3Bh=f0b33b6fb8e0586e9584a7a409dcc31263776a67; http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095513.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095516.html
CVE: CVE-2012-6503
Published: 2013-01-24
Description: Unspecified vulnerability in the NinjaXplorer component before 1.0.7 for Joomla! has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://ninjaforge.com/blog/318-security-vulnerability-discovered-in-ninjaxplorer-upgrade-immediately; http://secunia.com/advisories/48958; http://www.osvdb.org/81630
CVE: CVE-2012-6504
Published: 2013-01-24
Description: SQL injection vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0206.html; http://secunia.com/advisories/48988; http://www.exploit-db.com/exploits/18788
CVE: CVE-2012-6505
Published: 2013-01-24
Description: Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0206.html; http://secunia.com/advisories/48988; http://www.exploit-db.com/exploits/18788
CVE: CVE-2012-6506
Published: 2013-01-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://plugins.trac.wordpress.org/changeset?reponame=&old=537613%40zingiri-web-shop&new=537613%40zingiri-web-shop; http://secunia.com/advisories/48991; http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/
CVE: CVE-2012-6507
Published: 2013-01-24
Description: Multiple SQL injection vulnerabilities in admin.php in ChurchCMS 0.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameters in a login action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0178.html; http://packetstormsecurity.org/files/112106/ChurchCMS-0.0.1-SQL-Injection.html; http://www.securityfocus.com/bid/53209
CVE: CVE-2012-6508
Published: 2013-01-24
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; (2) create a user or (3) create a sub user via a sub_accounts action in the home module to USERS/index.php; or (4) change profile information via an edit action in the profile module to USERS/index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.org/files/112226/Car-Portal-CMS-3.0-CSRF-XSS-Shell-Upload.html; http://secunia.com/advisories/49010; http://www.vulnerability-lab.com/get_content.php?id=502
CVE: CVE-2012-6509
Published: 2013-01-24
Description: Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.org/files/112226/Car-Portal-CMS-3.0-CSRF-XSS-Shell-Upload.html; http://www.securityfocus.com/bid/53267; http://www.vulnerability-lab.com/get_content.php?id=502
CVE: CVE-2012-6510
Published: 2013-01-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PWRS or (2) Description field when posting a new vehicle; (3) news title when creating news; (4) Name when creating a sub user; (5) group name when creating a group; or (6) dealer name, (7) first name, or (8) last name when changing a profile.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/112226/Car-Portal-CMS-3.0-CSRF-XSS-Shell-Upload.html; http://www.securityfocus.com/bid/53267; http://www.vulnerability-lab.com/get_content.php?id=502
CVE: CVE-2012-6511
Published: 2013-01-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in organizer/page/users.php in the Organizer plugin 1.2.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) delete_id parameter or (2) extension parameter in an "Update Setting" action to wp-admin/admin.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/112086/WordPress-Organizer-1.2.1-Cross-Site-Scripting-Path-Disclosure.html; http://websecurity.com.ua/5782; https://exchange.xforce.ibmcloud.com/vulnerabilities/75105
CVE: CVE-2012-6512
Published: 2013-01-24
Description: The Organizer plugin 1.2.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors to (1) plugin_hook.php, (2) page/index.php, (3) page/dir.php (4) page/options.php, (5) page/resize.php, (6) page/upload.php, (7) page/users.php, or (8) page/view.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.org/files/112086/WordPress-Organizer-1.2.1-Cross-Site-Scripting-Path-Disclosure.html; http://websecurity.com.ua/5782; https://exchange.xforce.ibmcloud.com/vulnerabilities/75107
CVE: CVE-2012-6513
Published: 2013-01-24
Description: Cross-site scripting (XSS) vulnerability in index.php/Admin_Preferences in gpEasy CMS 2.3.3 allows remote attackers to inject arbitrary web script or HTML via the jsoncallback parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://hauntit.blogspot.com/2012/03/en-gpeasy-233-html-injection-xss.html; http://secunia.com/advisories/48994; http://www.securityfocus.com/bid/53269
CVE: CVE-2012-6514
Published: 2013-01-24
Description: Cross-site scripting (XSS) vulnerability in the nBill (com_nbill) component 2.3.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the message parameter in an income action to administrator/index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://hauntit.blogspot.com/2012/04/en-nbill-lite-joomla-component-html.html; http://packetstormsecurity.org/files/112235/Joomla-nBill-Lite-Cross-Site-Scripting.html; http://secunia.com/advisories/49004
CVE: CVE-2012-6515
Published: 2013-01-24
Description: eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in the lesson_info module to index.php, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://hauntit.blogspot.com/2012/04/en-efront-3610-cms-information.html; http://secunia.com/advisories/49003; http://www.securityfocus.com/bid/53272
CVE: CVE-2012-6516
Published: 2013-01-24
Description: SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via the q parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0190.html; http://www.exploit-db.com/exploits/18778; http://www.securityfocus.com/bid/53235
CVE: CVE-2012-6517
Published: 2013-01-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) question parameter to in /modules/poll/add.php or (2) question or (3) answer parameter to modules/poll/edit.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html; http://packetstormsecurity.org/files/112224/DIY-CMS-1.0-Poll-XSS-CSRF-SQL-Injection.html; http://www.exploit-db.com/exploits/18804
CVE: CVE-2012-6518
Published: 2013-01-24
Description: Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html; http://packetstormsecurity.org/files/112224/DIY-CMS-1.0-Poll-XSS-CSRF-SQL-Injection.html; http://secunia.com/advisories/49011
CVE: CVE-2012-6519
Published: 2013-01-24
Description: SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html; http://packetstormsecurity.org/files/112224/DIY-CMS-1.0-Poll-XSS-CSRF-SQL-Injection.html; http://secunia.com/advisories/49011
CVE: CVE-2012-6520
Published: 2013-01-24
Description: Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. NOTE: this issue could not be reproduced by third parties.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-03/0046.html; http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt; http://www.openwall.com/lists/oss-security/2012/04/12/12
CVE: CVE-2012-6521
Published: 2013-01-24
Description: Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/115253/Elefant-CMS-1.2.0-Cross-Site-Scripting.html; http://secunia.com/advisories/48118; http://packetstormsecurity.org/files/115253/Elefant-CMS-1.2.0-Cross-Site-Scripting.html
CVE: CVE-2012-5668
Published: 2013-01-24
Description: FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9b6b5754b57c12b820e01305eb69b8863a161e5a; http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html
CVE: CVE-2012-5669
Published: 2013-01-24
Description: The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=07bdb6e289c7954e2a533039dc93c1c136099d2d; http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html
CVE: CVE-2012-5670
Published: 2013-01-24
Description: The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7f2e4f4f553f6836be7683f66226afac3fa979b8; http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html
CVE: CVE-2012-6095
Published: 2013-01-24
Description: ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands.
CVSS Score: 1.2 (LOW)
CWE: CWE-362
References: http://bugs.proftpd.org/show_bug.cgi?id=3841; http://proftpd.org/docs/NEWS-1.3.5rc1; http://secunia.com/advisories/51823
CVE: CVE-2012-6435
Published: 2013-01-24
Description: When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the CPU to stop logic execution and enter a fault state, a DoS can occur. This situation could cause loss of availability and a disruption of communication with other connected devices.





Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-399
References: http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102; https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154; https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155
CVE: CVE-2012-6436
Published: 2013-01-24
Description: The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the CPU to crash. Successful exploitation of this vulnerability could cause loss of availability and a disruption in communications with other connected devices.







Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102; https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154; https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155
CVE: CVE-2012-6437
Published: 2013-01-24
Description: The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause loss of availability, integrity, and confidentiality and a disruption in communications with other connected devices.





Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
CVSS Score: 10.0 (HIGH)
CWE: CWE-287, CWE-287
References: http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102; https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154; https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155
CVE: CVE-2012-6438
Published: 2013-01-24
Description: The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the NIC to crash. Successful exploitation of this vulnerability could cause loss of availability and a disruption in communications with other connected devices.





Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://rockwellautomation.custhelp.com/app/answers/detail/a_id/54102; https://rockwellautomation.custhelp.com/app/answers/detail/a_id/470154; https://rockwellautomation.custhelp.com/app/answers/detail/aid/470155