CVE-2018-19016: Improper Input Validation

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB includes 1756-EWEBK Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected...

PT-2019-9708

Name of the Vulnerable Software and Affected Versions Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB includes 1756-EWEBK versions 5.001 and earlier Rockwell Automation CompactLogix 1768-EWEB versions 2.005 and earlier Description A remote attacker could send a crafted UDP packet to...

Rockwell Automation RSLinx Classic Remote Code Execution (CVE-2019-6553)

A buffer overflow vulnerability exists in RSLinx Classic. This is due to a lack of input validation when handling EtherNet/IP packets. A successful exploitation of the vulnerability could to arbitrary code execution or denial of service conditions...

Rockwell Automation MicroLogix 1400 and 1756 ControlLogix Denial of Service (CVE-2018-17924)

A denial of service vulnerability exists in Rockwell MicroLogix 1400 Controllers and 1756 ControlLogix Ethernet/IP Communications Modules. An unauthenticated, remote attacker could exploit this vulnerability by sending a specially crafted CIP connection request packet to an affected device, causi...

What you can learn from Cisco Talos’ new oil pumpjack workshop

Paul Rascagneres wrote this blog post with contributions from Patrick DeSantis from Cisco Talos ARES Advanced Research/Embedded Systems. Executive summary Every day, more industrial control systems ICS become vulnerable to cyber attacks. As these massive, critical machines become more...

Rockwell Automation EtherNet/IP Web Server Modules

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: EtherNet/IP Web Server Modules Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker...

Wireshark Reuse After Release Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A post-release reuse vulnerability exists in epan/dissectors/packet-enip.c in Wireshark...

DEBIAN-CVE-2019-5721

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided...

Rockwell Automation MicroLogix Detection (EtherNet/IP)

Detection of Rockwell Automation MicroLogix PLC SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WAGO PLC Detection (EtherNet/IP)

This script performs EtherNet/IP based detection of WAGO PLC Controllers. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Rockwell Automation RSLinx Classic Buffer Overflow (CVE-2018-14821)

A buffer overflow vulnerability exists in Rockwell Automation RSLinx Classic. The vulnerability is due to incorrect handling of malformed EtherNet/IP packets. A successful exploitation of the vulnerability could lead to a system crash...

Rockwell Automation RSLinx Classic Stack Buffer Overflow (CVE-2018-14829)

A stack buffer overflow vulnerability exists in Rockwell Automation RSLinx Classic. The vulnerability is due to incorrect handling of malformed EtherNet/IP packets. A successful exploitation of the vulnerability could lead to a system crash...

Rockwell Automation RSLinx Classic Denial of Service (CVE-2018-14827)

A denial of service vulnerability exists in Rockwell Automation RSLinx Classic. The vulnerability is due to incorrect handling of malformed EtherNet/IP packets. A successful exploitation of the vulnerability could lead to a system crash...

FLIR Systems FLIR AX8 Thermal Camera 1.32.16 Hard-coded Credentials Shell Access

FLIR Systems FLIR AX8 Thermal Camera 1.32.16 Hard-coded Credentials Shell Access Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected version: Firmware: 1.32.16 1.17.13 OS: necov1.8-0-g7ffe5b3 Hardware: Flir Systems Neco Board Summary: Thermal Imaging Camera For Continuous...

FLIR Systems FLIR AX8 Thermal Camera 1.32.16 RTSP Stream Disclosure

FLIR Systems FLIR AX8 Thermal Camera 1.32.16 RTSP Stream Disclosure Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected version: Firmware: 1.32.16 1.17.13 OS: necov1.8-0-g7ffe5b3 Hardware: Flir Systems Neco Board Summary: Thermal Imaging Camera For Continuous Condition and...

FLIR Systems FLIR AX8 Thermal Camera 1.32.16 Hard-coded Credentials Shell Access

Summary Thermal Imaging Camera For Continuous Condition and Safety Monitoring FLIR AX8 is a thermal sensor with imaging capabilities. Combining thermal and visual cameras in a small, affordable package, the AX8 provides continuous temperature monitoring and alarming capabilities to protec critica...

Rockwell Automation RSLinx Classic Denial of Service Vulnerability (CNVD-2019-09766)

Rockwell Automation RSLinx Classic is a factory communications solution from Rockwell Automation. The solution supports access to Rockwell Software, Allen-Bradley applications, etc. via Allen-Bradley programmable controllers. A denial of service vulnerability exists in Rockwell Automation RSLinx...

CVE-2018-14827

CVE-2018-14827 affects Rockwell Automation RSLinx Classic Versions ≤ 4.00.01. A remote, unauthenticated actor can send specially crafted Ethernet/IP packets to port 44818, causing the RSLinx Classic software to stop responding and crash; recovery requires a restart. The connected documents confir...

CVE-2018-14827

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionali...

CVE-2018-14827

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionali...