Rockwell Automation/Allen-Bradley 1766-L32AWA MicroLogix 1400 PLC

Binary data 750429.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Denial of Service

Binary data 720098.prm...

Rockwell Automation Micrologix 1400 <= 21.2 Memory Module Bit Exploit

Binary data 720217.prm...

Rockwell Automation Micrologix 1400 <= 21.2 Ladder Logic Overwrite

Binary data 720216.prm...

The vulnerability of MicroLogix 1400 programmable logic controllers and ControlLogix communication modules lies in the lack of authentication for critical functions, allowing attackers to trigger malfunctions during maintenance operations.

The vulnerability of the microprogrammed logic controller MicroLogix 1400 and the communication module 1756 ControlLogix lies in the absence of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to cause a service failure by connecting via the CIP protoc...

CVE-2019-10955

In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers...

CVE-2019-10955

Affected products: Rockwell Automation MicroLogix 1400 (Series A, B up to v15.002), MicroLogix 1100 (v14.00 and earlier), CompactLogix 5370 L1/L2/L3 controllers (up to v30.014), including GuardLogix. Vulnerability type: open redirect in the controller web server that could be exploited by a remot...

Multiple Rockwell Automation Products Input Validation Error Vulnerability

Rockwell Automation MicroLogix 1400 Controllers Series A and others are a programmable logic controller from Rockwell Automation. The input validation error vulnerability exists in multiple Rockwell Automation products and stems from a networked system or product that does not properly validate...

Rockwell Automation MicroLogix 1400 and CompactLogix 5370 Controllers

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: MicroLogix 1400 and CompactLogix 5370 Controllers Vulnerability: Open Redirect 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote...

Rockwell Automation MicroLogix 1400 and 1756 ControlLogix Denial of Service (CVE-2018-17924)

A denial of service vulnerability exists in Rockwell MicroLogix 1400 Controllers and 1756 ControlLogix Ethernet/IP Communications Modules. An unauthenticated, remote attacker could exploit this vulnerability by sending a specially crafted CIP connection request packet to an affected device, causi...

Rockwell Automation Allen Bradley Micrologix 1400 Series Access Control Information Disclosure (CVE-2017-14462)

An Information Disclosure vulnerability exists in Rockwell Automation Allen Bradley Micrologix 1400 Series. A remote, unauthenticated attacker can exploit the vulnerability by sending crafted packets to the target system causing access control and information disclosure...

Denial of Service Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation MicroLogix 1400 Controllers Series A and others are programmable logic controllers from Rockwell Automation. A security vulnerability exists in several Rockwell Automation products that stems from a lack of authentication in the program. An attacker could exploit this...

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

Design/Logic Flaw

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

CVE-2018-17924

CVE-2018-17924 affects Rockwell Automation MicroLogix 1400 Controllers (Series A/B/C) and 1756 ControlLogix EtherNet/IP Communications Modules. The vulnerability allows an unauthenticated remote actor to initiate a CIP connection and push a new IP configuration, potentially disrupting system comm...

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules Vulnerability: Missing Authentication for Critical Function 2. REPOSTED INFORMATION This...

Rockwell Automation MicroLogix

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low skill level to exploit. Vendor : Rockwell Equipment : MicroLogix Controller Vulnerabilities : Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause denial of service,...

Security Bulletin: Rational Software Architect Design Manager is vulnerable to cross-site scripting (CVE-2018-1400)

Summary RSA DM allowed injection of arbitrary JavaScript code into configuration names, which could later get executed during some configuration management operations. Vulnerability Details CVEID: CVE-2018-1400 DESCRIPTION: IBM Rhapsody DM is vulnerable to cross-site scripting. This vulnerability...

CVE-2017-12092

An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated...