Loading
myRockwellAutomation
工作机会
投资者
PartnerNetwork 门户
联系我们
热门资源
兼容性和下载中心 (PCDC) 知识库 Literature Library 生命周期状态 Learning+ 培训门户
 
产品管理
资产管理 (RAAMP) Installed Base Evaluation (IBE) My Equipment Self-Service 产品注册 维修 服务合同和票据 软件激活 软件订阅 可持续性仪表板
 
产品配置和选型
顾问 材料单 CrossWorks Integrated Architecture Builder 产品目录 ProposalWorks 方案生成器 ProposalWorks 标准制定者 Safety Automation Builder
 

 

查看全部工具 →

InformationInformation
This content is not available in your selected language.
Rockwell Automation 徽标
产品
硬件
硬件新动向
电路和负载保护 状态监测 连接设备 分布式控制系统 变频器 能源监测 人机界面 (HMI) 独立推车技术 工业计算机和监视器 工业控制产品 输入/输出模块 照明控制
运动控制 马达控制 网络安全与基础架构 成套解决方案 电源 可编程控制器 按钮和信号设备 继电器和计时器 安全仪表系统 安全产品 传感器和开关 信号接口
软件
软件新动向
云软件
软件订阅
 
设计
Studio 5000 FactoryTalk Logix Echo Emulate3D 数字孪生体 Arena 仿真 FactoryTalk Design Studio FactoryTalk Twin Studio FactoryTalk Vault
 
分析与数据
FactoryTalk Analytics FactoryTalk Historian FactoryTalk Analytics LogixAI FactoryTalk DataMosaix FactoryTalk Energy Manager Thingworx 工业物联网 FactoryTalk Transaction Manager FactoryTalk Analytics VisionAI FactoryTalk Analytics Pavilion8
HMI
FactoryTalk View FactoryTalk Optix
 
MES
Plex MES Plex 质量管理 FactoryTalk PharmaSuite Finite Scheduler
 
性能监控
Plex 生产监控 FactoryTalk Metrics 整体设备效率
 
瘦客户端管理
ThinManager
维护
Plex APM Fiix CMMS FactoryTalk AssetCentre FactoryTalk Remote Access FactoryTalk Network Manager Emonitor
 
过程
PlantPAx FactoryTalk Batch
 
工业通信
FactoryTalk Linx
 
XR/增强现实
Vuforia
产品名录 Allen‑Bradley FactoryTalk
服务
资产优化与团队服务
资产优化服务概述 设备维修 设备再制造 维修与库存协议 集成服务协议 远程支持与监视 现场服务 安全服务 培训服务
网络安全与网络基础设施
网络安全 工业网络基础设施 预先设计的网络解决方案
数字主线
概述
生产自动化
概述
LifecycleIQ 服务
LifecycleIQ 服务
LifecycleIQ 服务
生命周期服务帮助您的生产设施更快、更智能化的运行,并在生产周期的每个阶段实现更出色的敏捷性。
现在开始
LifecycleIQ 服务
解决方案与行业
解决方案
高级运动与机器人技术 资产管理 网络安全 数据操作和分析 数字主线 数字化转型 工业自动化和控制 工业部件 网络与基础设施 机旁控制解决方案
成套解决方案 过程解决方案 生产自动化 制造运营管理 安全解决方案  可扩展控制与可视化 智能制造 可持续解决方案 赋能劳动力
 
解决方案适用于
原始设备制造商
行业
汽车与轮胎行业 水泥 化工 娱乐 化纤与纺织 食品和饮料 家庭与个人护理 氢气 基础设施 生命科学
船舶 冶金 矿山 石油和天然气 发电 印刷和出版 纸浆和造纸 半导体 仓储和履单 水/污水处理
罗克韦尔自动化为逸超包装铺就出海之路
罗克韦尔自动化为逸超包装铺就出海之路
应用案例
应用案例
罗克韦尔自动化为逸超包装铺就出海之路
罗克韦尔以智能机器解决方案,助力逸超包装实现设备智能化升级,成功进军海外市场。
立即阅读
查看案例研究
支持
文档
技术文档中心 产品图纸和接线图 产品认证 版本说明 技术规格
产品支持
下载 选型与配置 管理
培训
网络研讨会 员工发展培训 教师指导课程 认证计划 工作指导 培训工作站 Learning+ 订阅式在线学习课程
联系我们
TechConnect 支持 客户服务中心 Software Portal Help 一般查询
TechConnect 支持
一位戴耳机的男士正在提供客户服务支持
TechConnect 支持

获取解决技术挑战的知识和帮助。

了解有关 TechConnect 的更多信息
兼容性和下载中心 (PCDC) 知识库 Literature Library Engage Online Community
销售与合作伙伴
查找合作伙伴
转到合作伙伴搜索器
 
我们的 PartnerNetwork
PartnerNetwork 计划 分销商合作伙伴 许可开发商
原始设备制造商 (OEM) 合作伙伴 系统集成商合作伙伴 技术合作伙伴
PartnerNetwork™ 是什么?
两个人正在使用平板电脑进行交互
PartnerNetwork™ 是什么?

我们的 Rockwell Automation PartnerNetwork™ 计划帮助客户找到更佳人力、产品、服务与解决方案,以满足其生产目标,并使互联企业成为现实。

立即探索
myRockwellAutomation
工作机会
投资者
PartnerNetwork 门户
联系我们
资源
热门资源
兼容性和下载中心 (PCDC) 知识库 Literature Library 生命周期状态 Learning+ 培训门户
 
产品管理
资产管理 (RAAMP) Installed Base Evaluation (IBE) My Equipment Self-Service 产品注册 维修 服务合同和票据 软件激活 软件订阅 可持续性仪表板
 
产品配置和选型
顾问 材料单 CrossWorks Integrated Architecture Builder 产品目录 ProposalWorks 方案生成器 ProposalWorks 标准制定者 Safety Automation Builder
 

 

查看全部工具 →

选择国家或地区
  • 中国
  • Argentina
  • Australia
  • Belgique | Belgium
  • Brasil
  • Canada
  • Colombia
  • Czech Republic
  • Denmark
  • Deutschland
  • España
  • Finland
  • France
  • Hungary
  • India
  • Indonesia
  • Ireland
  • Israel
  • Italia
  • México
  • Netherlands
  • New Zealand
  • Norway
  • Poland
  • Portugal
  • Puerto Rico
  • Romania
  • Russia
  • Schweiz | Suisse
  • Singapore
  • South Africa
  • Sweden
  • Turkey
  • Ukraine
  • United Arab Emirates
  • United Kingdom
  • United States
  • Österreich
  • 台灣, 中國
  • 日本
  • 한국
选择语言
  • 简体中文
  • Deutsch
  • English
  • Español
  • Français
  • Italiano
  • Português
  • 日本語
  • 繁體中文
  • 한국어
登录 Create an Account
Why Create an Account?
Create bills of materials, submit repair quotes, register products and more!

Manage your e-communication subscription preferences.

Manage your user profile.
Welcome, {0}
Residing Location
我的帐户 注销
您近期的搜索记录
  • HistoryHistory
    CloseClose
  • HistoryHistory
    CloseClose
  • HistoryHistory
    CloseClose
  • HistoryHistory
    CloseClose
  • HistoryHistory
    CloseClose
  • HistoryHistory
    CloseClose
所有
产品
文档
下载
建议搜索词条
  • SearchSearch
  • SearchSearch
  • SearchSearch
  • SearchSearch
  • SearchSearch
  • SearchSearch
“{0}” 的结果
查看所有结果
“{0}” 的产品结果
Product Image
Product Image
Product Image
查看所有产品结果
“{0}” 的文档结果
Portable Document Format.pdf file type
发布类型 发布日期 语言
Portable Document Format.pdf file type
发布类型 发布日期 语言
Portable Document Format.pdf file type
发布类型 发布日期 语言
查看所有文档结果
“{0}” 的下载结果
DownloadDownload
目录编号
DownloadDownload
目录编号
DownloadDownload
目录编号
查看所有下载结果

PN692 | MicroLogix™ 1100 and 1400 Controller Vulnerability

Severity:
Critical
Advisory ID:
PN692
发布日期:
July 18, 2012
上次更新时间:
January 13, 2025
Revision Number:
1.0
Known Exploited Vulnerability (KEV):
否
Corrected:
是
Workaround:
是
CVE IDs
CVE-2012-6440
摘要
MicroLogix™ 1100 and 1400 Controller Vulnerability

 

Introduction

MicroLogix™ 1100 and 1400 Controller Vulnerability

Description

July 18, 2012 - version 1.0

Update to May 4, 2012

On January 19, 2012, Rockwell Automation was notified by Digital Bond, Inc. of vulnerabilities discovered in an Allen‑Bradley MicroLogix controller. The public disclosure of these findings occurred at the S4 conference and included details to allow for potential reproduction and exploitation of these vulnerabilities.

<Update A>

Rockwell Automation released firmware for the MicroLogix 1400 controller in June 2012 to address the identified product vulnerability in a potential replay attack directed at the product’s webserver.

Due to technical limitations in the MicroLogix 1100 platform, to reduce associated risk with this vulnerability Rockwell Automation recommends concerned customers follow good industrial control system design and security practices including those listed below in RISK MITIGATION.

 

AFFECTED PRODUCTS

Rockwell Automation’s Security Taskforce has determined the following Rockwell Automation products are affected by this vulnerability

  • MicroLogix 1100
  • MicroLogix 1400

 

CVE-2012-6440

The webserver password authentication mechanism employed by the affected products is vulnerable to a Man-in-the-Middle (MitM) and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the product’s webserver to view and alter product configuration and diagnostics information. Recovery from successful exploitation of this vulnerability may require the product to be reset to its factory-default settings.

 

RISK MITIGATION

Enhancements to the MicroLogix 1400 firmware are being released that reduce the potential for a successful replay attack targeting the product’s webserver.

 

MicroLogix 1400

Catalog Number

Description

Affected Products

Corrective Firmware

1766-L32xxxx

MicroLogix 1400 controller

Series B FRN 11 or earlier

FRN 12 or higher

Current firmware for MicroLogix can be obtained here:

http://www.ab.com/linked/programmablecontrol/plc/micrologix/downloads.html


<Update A>

 

MicroLogix 1100 and 1400

To help reduce the likelihood of compromise and the associated security risk, Rockwell Automation recommends the following immediate mitigation strategies. When possible, multiple strategies should be employed simultaneously:

1. Where possible for affected products, disable the web server in the Ethernet Channel 1 configuration in RSLogix 500 software. This is done by unchecking the HTTP Server Enable checkbox (checked by default) and power cycling the controller.

2. Change all default Administrator and Guest passwords.

3. If webserver functionality is desired in the MicroLogix 1100 or 1400 controllers, we recommend the product’s firmware be upgraded to the most current version that includes enhanced protections including:

a. When a controller receives two consecutive invalid authentication requests from any HTTP client, the controller resets the Authentication Counter after 60 minutes.

b. When a controller receives 10 invalid authentication requests from any HTTP client, it will not accept any valid or invalid Authentication packets until a 24-hour HTTP Server Lock Timer timeout.

WARNING/REMINDER: Upgrading the controller firmware clears the web server configuration. It is necessary to manually record the web server settings prior to a firmware upgrade so the configuration can be manually re-entered into the web server settings after the firmware upgrade is complete.

NOTE: The latest MicroLogix 1100 and 1400 firmware versions are posted at: http://www.ab.com/linked/programmablecontrol/PLC/MicroLogix/downloads.html

4. If webserver functionality is desired in the MicroLogix 1100 or 1400 controllers, we recommend you configure User Accounts to only provide READ access to the product (e.g. do not configure READ/WRITE for Users). In addition, where possible exclusively access the product via User Accounts to minimize potential for a Replay attack to the Administrator’s account. User-administration is done through the product’s webserver.

NOTE: Rockwell Automation continues to investigate and evaluate other product-level strategies to address this vulnerability.

In addition to the above, we recommend concerned customers remain vigilant and continue to follow security strategies that help reduce risk and enhance overall control system security. Where possible, we suggest you apply multiple recommendations and complement this list with your own best-practices:

1. Employ layered security and defense-in-depth methods in system design to restrict and control access to individual products and ControlNetworks. Refer to http://www.ab.com/networks/architectures.html for comprehensive information about implementing validated architectures designed to deliver these measures.

2. Restrict physical and electronic access to automation products, networks and systems to only those individuals authorized to be in contact with control system equipment.

3. Employ firewalls with ingress/egress filtering, intrusion detection/prevention systems, and validate all configurations. Evaluate firewall configurations to ensure other appropriate inbound and outbound traffic is blocked.

4. Use up to date end-point protection software (e.g. antivirus/anti-malware software) on all PC-based assets.

5. Make sure that software and control system device firmware is patched to current releases.

6. Periodically change passwords in control system components and infrastructure devices.

7. Where applicable, set the controller key-switch/mode-switch to RUN mode

8. Enlist additional security expertise by engaging Rockwell Automation’s Network & Security Services team for specialized, consultative services. For more detail visit http://www.rockwellautomation.com/services/security/

Based on the outcome of our ongoing investigation, we will communicate relevant recommended mitigation strategies to our concerned customers.

Rockwell Automation remains committed to making security enhancements to our systems in the future. For more information and for assistance with assessing the state of security of your existing control system, including improving your system-level security when using Rockwell Automation and other vendor controls products, you can visit the Rockwell Automation Security Solutions web site at http://www.rockwellautomation.com/solutions/security

KCS Status

Released

 

Rockwell Automation Home
Copyright ©2022 Rockwell Automation, Inc.
  1. Chevron LeftChevron Left Rockwell Automation 主页 Chevron RightChevron Right
  2. Chevron LeftChevron Left Trust Center Chevron RightChevron Right
  3. Chevron LeftChevron Left Industrial Security Adv Chevron RightChevron Right
  4. Chevron LeftChevron Left Industrial Security Advisory Detail Chevron RightChevron Right
公司
关于我们 工作机会 多元化、道德与完整性 Engage Online Community 投资者关系 可持续性 信托中心
新闻和活动
新闻发布室 新闻稿 Automation Fair 事件
 
趋势图主题
网络安全 数字化转型 智能制造 The Connected Enterprise®
培训
网络研讨会 培训
 
PartnerNetwork
查找合作伙伴 PartnerNetwork 是什么?
 
我们的品牌
Allen‑Bradley FactoryTalk LifecycleIQ 服务
联系我们
TechConnect 支持 客户服务中心 一般问题 如何购买 报告道德问题
洞察力
ROKStudios 自动化前沿 博客 案例研究 播客
BlogRockwell Automation's Blog
CN | ZH
法律声明
隐私与 Cookie 策略
电子邮件首选项
Cookie 首选项
可访问性首选项
© 2025 Rockwell Automation
Rockwell Automation 主页
请更新您的Cookies偏好以继续.
此功能需要Cookies来增强您的体验。请更新您的系统偏好以允许使用这些Cookies:
  • 社交媒体Cookies
  • 功能Cookies
  • 性能 Cookies
  • 市场营销Cookies
  • 所有Cookies
您可以随时更新您的系统偏好。如需了解更多信息,请参阅我们的 隐私政策
CloseClose