29 matches found
Stack overflow
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 excluding all firmware versions prior to FRN 16.00, which are not affected. By sending malformed common industrial protocol CIP packet, an attacker may be able to overflow a...
Sql injection
SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-6490
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2015-6488
CVE-2015-6488 : A cross-site scripting (XSS) vulnerability exists in the web server of Rockwell Automation’s Allen‑Bradley MicroLogix PLCs. Affected devices are MicroLogix 1100 (Series B and earlier firmware) and MicroLogix 1400 (Series B and earlier firmware). The issue allows remote attackers t...
CVE-2015-6491
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...
CVE-2015-6486
CVE-2015-6486 describes an SQL injection in Rockwell Automation’s MicroLogix 1100 and 1400 PLCs. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Affected products: MicroLogix 1100 (hardware Series B, firmware 14.000 and earlier; mitig...
Rockwell Automation MicroLogix 1100 PLC < FRN 10.0 Authentication Mechanism DoS
Binary data scadarockwellmicrologix1100plcdos278864.nbin...