Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500247.NASLHistoryNov 08, 2019 - 12:00 a.m.
Rockwellautomation Powermonitor Exposure of Resource to Wrong Sphere
2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
11
EPSS
0.019
Percentile
88.7%
An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because access control is implemented on the client side via a disabled attribute for a BUTTON element.
File data ot_500247.naslReferences
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19616
packetstormsecurity.com/files/150619/Rockwell-Automation-Allen-Bradley-PowerMonitor-1000-Authentication-Bypass.html
www.securityfocus.com/bid/106333
www.securityfocus.com/bid/108538
ics-cert.us-cert.gov/advisories/ICSA-19-050-04
www.exploit-db.com/exploits/45937/
Related
cve
cve
CVE-2018-19616
2018-12-26 21:29:02
packetstorm
packetstorm
Rockwell Automation Allen-Bradley PowerMonitor 1000 Authentication Bypass
2018-12-05 00:00:00
exploitpack
exploitpack
prion
prion
Design/Logic Flaw
2018-12-26 21:29:00
cvelist
cvelist
CVE-2018-19616
2018-12-26 20:00:00
zdt
zdt
nvd
nvd
CVE-2018-19616
2018-12-26 21:29:02
exploitdb
exploitdb
ics
ics
Rockwell Automation Allen-Bradley PowerMonitor 1000 (Update A)
2019-09-05 12:00:00