Rockwell Automation Select Communication Modules Out-of-Bounds Write (CVE-2023-3596)

A vulnerability exists in the 1756-EN4 products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Rockwell Automation 1756 缓冲区错误漏洞

The Rockwell Automation 1756 is a scalable controller solution from Rockwell Automation. It is capable of addressing a large number of I/O points. A security vulnerability exists in the Rockwell Automation 1756-EN4, which originates from a malicious user who may be able to assert a denial of...

PT-2023-3664 · Rockwell Automation · 1756-En2T +7

Name of the Vulnerable Software and Affected Versions: Rockwell Automation 1756-EN2T version Rockwell Automation 1756-EN2TK version Rockwell Automation 1756-EN2TXT version Rockwell Automation 1756-EN2TP version Rockwell Automation 1756-EN2TPK version Rockwell Automation 1756-EN2TPXT version...

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability...

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability...

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability...

Information disclosure

OLE Automation Information Disclosure Vulnerability...

CVE-2023-32042 OLE Automation Information Disclosure Vulnerability

...

CVE-2023-32042 OLE Automation Information Disclosure Vulnerability

...

CVE-2023-32042

Technical details about CVE-2023-32042 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates as connected sources do not elaborate.

CVE-2023-2746

The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing CORS settings and, as a result, is vulnerable to a Cross Site Request Forgery CSRF attack. To exploit this vulnerability, a...

CVE-2023-2746

The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing CORS settings and, as a result, is vulnerable to a Cross Site Request Forgery CSRF attack. To exploit this vulnerability, a...

Cross site scripting

The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product. The vulnerable pages do not require privileges to access and can be injected with code by an attacker which could be used to leverage an attack on an authenticated...

Cross site request forgery (csrf)

The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing CORS settings and, as a result, is vulnerable to a Cross Site Request Forgery CSRF attack. To exploit this vulnerability, a...

CVE-2023-2746 Rockwell Automation Enhanced HIM Vulnerable to Cross-Site Request Forgery Attack

The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing CORS settings and, as a result, is vulnerable to a Cross Site Request Forgery CSRF attack. To exploit this vulnerability, a...

CVE-2023-2746 Rockwell Automation Enhanced HIM Vulnerable to Cross-Site Request Forgery Attack

The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing CORS settings and, as a result, is vulnerable to a Cross Site Request Forgery CSRF attack. To exploit this vulnerability, a...

CVE-2023-2746

Rockwell Automation Enhanced HIM is affected by CSRF due to an API that is not sufficiently protected and incorrect CORS settings. Exploitation could lead to sensitive information disclosure and full remote access to affected products. Judgment from multiple sources (ICS advisory ICSA-23-192-01, ...

CVE-2023-2072

CVE-2023-2072 affects Rockwell Automation PowerMonitor 1000. Stored cross-site scripting in the product’s web pages allows code injection by an unauthenticated attacker to impact an authenticated user, potentially enabling remote code execution and compromising confidentiality, integrity, and ava...

CVE-2023-2072 Rockwell Automation PowerMonitor 1000 Cross-Site Scripting Vulnerability

The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product. The vulnerable pages do not require privileges to access and can be injected with code by an attacker which could be used to leverage an attack on an authenticated...

CVE-2023-2072 Rockwell Automation PowerMonitor 1000 Cross-Site Scripting Vulnerability

The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product. The vulnerable pages do not require privileges to access and can be injected with code by an attacker which could be used to leverage an attack on an authenticated...