CVE-2012-4690: Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller plat...

Security readout for executives and security teams

This vulnerability can let a remote attacker disrupt certain Allen-Bradley controllers by causing status-bit changes when Static status is not enabled. For industrial sites, the concern is availability: affected PLCs could stop behaving normally, potentially interrupting operations. The provided sources do not include CVSS scoring or evidence of active exploitation. Exposure is most likely in OT networks running the named Allen-Bradley controller families, especially where controller communication is reachable from engineering workstations, plant networks, remote access paths, or poorly segmented environments. Prioritize sites where these controllers support critical processes or are reachable beyond tightly controlled OT segments. The main business risk is operational disruption, not data theft. Absence from KEV lowers urgency, but exposed PLCs still warrant prompt review. Mitigation focus: Review Rockwell Automation and ICS-CERT guidance for the affected controller families.; Enable Static status where vendor guidance and process safety requirements allow.; Restrict controller communication to trusted engineering and operations hosts..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.