ICS Rockwell Automation EtherNet IP CIP ControlLogix Ethernet Reset (CVE-2012-6442)

Rule ID

1234414

Severity

High

Description

When affected products receive a valid CIP message (Reset) from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the product to reset, may occur a DoS.

Impact

Denial of service

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Allow

References

Keywords

N/A