CVE-2020-14504

🗓️ 24 Feb 2022 18:26:56Reported by icscertType

Web interface mishandles authentication for HTTP POST requests, allowing remote modification of configuration settings

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-14504	24 Feb 202222:15	–	circl
CNNVD	Rockwell Automation 1734-AENTR 授权问题漏洞	4 Mar 202100:00	–	cnnvd
Cvelist	CVE-2020-14504	24 Feb 202218:26	–	cvelist
EUVD	EUVD-2020-6640	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation 1734-AENTR Series B and Series C	4 Mar 202100:00	–	ics
NVD	CVE-2020-14504	24 Feb 202219:15	–	nvd
Prion	Authentication flaw	24 Feb 202219:15	–	prion
Tenable Nessus	Rockwell (CVE-2020-14504) (deprecated)	4 Apr 202200:00	–	nessus
Vulnrichment	CVE-2020-14504	24 Feb 202218:26	–	vulnrichment

NVD

Vulners

Node

rockwellautomation 1734-aentr_point_i/o_dual_port_network_adaptor_series_b_firmwareRange4.001–4.005

rockwellautomation 1734-aentr_point_i/o_dual_port_network_adaptor_series_b_firmwareRange5.011–5.017

AND

rockwellautomation 1734-aentr_point_i/o_dual_port_network_adaptor_series_bMatch-

Node

rockwellautomation 1734-aentr_point_i/o_dual_port_network_adaptor_series_c_firmwareMatch6.011

rockwellautomation 1734-aentr_point_i/o_dual_port_network_adaptor_series_c_firmwareMatch6.012

AND

rockwellautomation 1734-aentr_point_i/o_dual_port_network_adaptor_series_cMatch-

[
  {
    "product": "1734-AENTR",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "Series B 4.001 to 4.005, and 5.011 to 5.017"
      },
      {
        "status": "affected",
        "version": "Series C 6.011 and 6.012"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-063-01

17 Apr 2025 19:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS 25

CVSS 3.15.3

EPSS0.00303

SSVC