Rockwell Automation ControlLogix Link Following (CVE-2009-0473)

Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. This plugin only works with Tenable.ot. Please visi...

Rockwell Automation Controllers Denial Of Service (CVE-2012-6439)

Rockwell Automation EtherNet/IP products allow remote attackers to cause a denial of service control and communication outage via a CIP message that modifies the 1 configuration or 2 network parameters. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

Rockwell Automation Logix Controllers Denial of Service (CVE-2012-6442)

Rockwell Automation EtherNet/IP products allow remote attackers to cause a denial of service control and communication outage via a CIP message that specifies a reset. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Rockwell Automation ControlLogix controllers Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2012-6438)

Buffer overflow in Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; allows remote attackers to cause a denial of service NIC...

Rockwell Automation ControlLogix Exposure of Sensitive Information to an Unauthorized Actor (CVE-2009-0474)

The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain internal web page information and internal information about the module via unspecified vectors. NOTE: this may overlap CVE-2002-1603. This plugin only works with...

Rockwell Automation ControlLogix controllers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2012-6441)

Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules allow remote attackers to obtain sensitive information via a crafted CIP packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CVE-2021-36765

In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is executed by the CODESYS Control runtime system...

Null pointer dereference

In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is executed by the CODESYS Control runtime system...

CVE-2021-36765

In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is executed by the CODESYS Control runtime system...

Vulnerability Spotlight: EIP Stack Group OpENer information disclosure vulnerability

Martin Zeiser of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable information disclosure vulnerability in EIP Stack Group OpENer’s Ethernet/IP UDP handler. OpENer is an Ethernet/IP stack for I/O adapter devices that... This is only the...

CVE-2021-21777

An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read...

Information disclosure

An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read...

CVE-2021-21777

An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read...

CVE-2021-21777

CVE-2021-21777 affects OpENer’s EIP Stack Group UDP handler. The vulnerability arises in the Ethernet/IP UDP path for OpENer 2.3 and the development commit 8c73bf3, where an integer/length handling bug in the UDP processing flow enables an out-of-bounds read. Specifically, a crafted UDP request c...

EIP Stack Group OpENer Ethernet/IP UDP handler information disclosure vulnerability

Summary An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read. Tested Versions EIP Stack Group OpENer 2.3 EIP Stack Group OpENe...

EIP Stack Group OpENer 缓冲区错误漏洞

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stack functionality to IO adapter devices . A security vulnerability exists in EIP Stack Group OpENer 2.3 that stems from a specially crafted network request that could result in an out-of-bounds read...

Severe Bugs Reported in EtherNet/IP Stack for Industrial Systems

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday issued an advisory warning of multiple vulnerabilities in the OpENer EtherNet/IP stack that could expose industrial systems to denial-of-service DoS attacks, data leaks, and remote code execution. All OpENer commits and...

EIPStackGroup OpENer EtherNet/IP Denial of Service Vulnerability

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stacking capabilities to IO adapter devices .A security vulnerability exists in EIPStackGroup OpENer Ethernet/IP that can be exploited by attackers to send specially crafted packets that could result ...

EIPStackGroup OpENer EtherNet/IP Denial of Service Vulnerability (CNVD-2021-53916)

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stack functionality to IO adapter devices. EIPStackGroup OpENer Ethernet/IP has a security vulnerability that can be exploited by attackers to send specially crafted packets that could result in a...

EIPStackGroup OpENer EtherNet/IP Out-of-Bounds Reading Vulnerability

Eipstackgroup Opener is a software for providing EtherNet/IP stacking capabilities for IO adapter devices organized by Eipstackgroup . EIPStackGroup OpENer Ethernet/IP has an out-of-bounds read vulnerability that can be exploited to send specially crafted packets to read arbitrary data...