CVE-2017-6024: Uncontrolled Resource Consumption

A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause...

CVE-2017-6024

A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause...

Stack overflow

An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 excluding all firmware versions prior to FRN 16.00, which are not affected. By sending malformed common industrial protocol CIP packet, an attacker may be able to overflow a...

CVE-2016-9343

CVE-2016-9343 affects Rockwell Automation Logix5000 controllers (FRN 16.00–21.00; earlier FRN 16.00+ excluded) via malformed CIP packets that overflow a stack-based buffer, enabling potential code execution or a nonrecoverable fault causing denial of service. The vulnerability is a stack-based bu...

CVE-2016-9343: Out-of-bounds Write

An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 excluding all firmware versions prior to FRN 16.00, which are not affected. By sending malformed common industrial protocol CIP packet, an attacker may be able to overflow a...

CVE-2017-3812

A vulnerability in the implementation of Common Industrial Protocol CIP functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to a system memory leak. More Information: CSCvc54788. Known...

Design/Logic Flaw

A vulnerability in the implementation of Common Industrial Protocol CIP functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to a system memory leak. More Information: CSCvc54788. Known...

CVE-2017-3812

Cisco Industrial Ethernet 2000 Series Switches are affected by CVE-2017-3812 due to a vulnerability in the Common Industrial Protocol (CIP) implementation that can trigger a denial-of-service condition via a memory leak. The issue is exploitable remotely and unauthenticated. OpenVAS details and v...

Cisco Industrial Ethernet 2000 Series Switches CIP Denial of Service Vulnerability

A vulnerability in the implementation of Common Industrial Protocol CIP functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to a system memory leak. The vulnerability is due to improper...

DEBIAN-CVE-2016-7992

The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cipifprint...

UBUNTU-CVE-2016-7992

The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cipifprint...

Cisco IOS Software CIP Request DoS (cisco-sa-20160928-cip)

According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Common Industrial Protocol CIP feature due to improper processing of unusual but valid CIP requests. An unauthenticated, remote...

CVE-2016-6391

Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service traffic-processing outage via a crafted series of Common Industrial Protocol CIP requests, aka Bug ID CSCur69036...

Code injection

Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service traffic-processing outage via a crafted series of Common Industrial Protocol CIP requests, aka Bug ID CSCur69036...

CVE-2016-6391

Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service traffic-processing outage via a crafted series of Common Industrial Protocol CIP requests, aka Bug ID CSCur69036...

Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerability (cisco-sa-20160928-cip)

A vulnerability in the Common Industrial Protocol CIP feature of Cisco IOS Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerability

A vulnerability in the Common Industrial Protocol CIP feature of Cisco IOS Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition. The vulnerability is due to a failure to properly process an unusual, but valid, set of requests to an affected device. ...

Ethernet/IP Protocol Detection

Binary data 7228.pasl...

EtherNet/IP CIP EDS Metadata

Binary data scadacipfile.nbin...

CVE-2016-2076

Client Integration Plugin CIP in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site...