SQL injection in Rockwell Automation Micrologix 1100 and 1400 PLC

2015-06-11T00:00:00
ID PT-2015-17
Type ptsecurity
Reporter Positive Technologies
Modified 2015-12-03T00:00:00

Description

PT-2015-17: SQL injection in Rockwell Automation Micrologix 1100 and 1400 PLC

Fix date:

                    October 27, 2015

Vector: Remote

Systems affected: Rockwell Automation 1763 MicroLogix 1100 ControllersRockwell Automation 1766 MicroLogix 1400 Controllers

Vendor: Rockwell Automation

Notification status: 11.06.2015 - Vendor gets vulnerability details 27.10.2015 - Vendor releases fixed version and details 03.12.2015 - Public disclosure