199 matches found
CVE-2015-6486: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
PT-2017-52: Information Disclosure in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in programmable-logic controllers, caused by sending user credentials to the web server using a HTTP GET method, allows attacker...
PT-2015-3356
Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers versions 16.00 and prior Rockwell Automation Allen-Bradley MicroLogix 1400 programmable logic controllers versions 16.00 and prior Description An Information...
PT-2015-3357
Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions prior to 16.00 Micrologix 1400 versions prior to 16.00 Description The issue is related to the use of weak passwords, specifically numeric passwords with a small maximum character size. This could allow a remote attack...
Rockwell Automation ControlLogix 远程拒绝服务漏洞
漏洞起因 边界条件错误影响系统Rockwell Automation Micrologix 1400 Rockwell Automation Micrologix 1100远程攻击者可以利用漏洞使设备崩溃。攻击所需条件 攻击者必须访问Rockwell Automation MicroLogix产品。漏洞信息Rockwell Automation MicroLogix是一款可编程控制器平台。 设备没有校验要拷贝到缓冲区的数据，允许远程攻击者可以向2222/TCP, 2222/UDP,...
Rockwell Automation MicroLogix 1100 PLC Default Credentials
Binary data scadarockwellmicrologix1100plcdefaulthttp.nbin...
Rockwell Automation MicroLogix 1100 PLC < FRN 10.0 Authentication Mechanism DoS
Binary data scadarockwellmicrologix1100plcdos278864.nbin...
Rockwell Automation MicroLogix 1100 PLC < Series B FRN 12.0 MitM Replay Authentication Bypass
Binary data scadarockwellmicrologix1100plcmitm470156.nbin...
Rockwell Automation MicroLogix 1100 PLC < Series B FRN 13.0 Multiple Vulnerabilities
Binary data scadarockwellmicrologix1100plcdos470154.nbin...
Rockwell Automation MicroLogix 1100 PLC Web Server Detection
Binary data scadarockwellmicrologix1100plcwebserverdetect.nbin...
PT-2017-02: Insufficient Permissions in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected an Insufficient Permissions vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in Allen-Bradly MicroLogix 1100 and 1400 allows remote attackers with administrative privileges to remove all administrators...
PT-2015-16: Cross-site scripting in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected a Cross-site scripting vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Cross-site scripting vulnerability in the web server on Allen-Bradly MicroLogix 1100 and 1400 devices allows remote attackers to inject arbitrary...
PT-2015-3316
Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 controller versions prior to 14.000 Rockwell Automation Micrologix 1400 affected versions not specified Description An issue was discovered where user credentials are sent to the web server in...
PT-2015-3315
Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 controller versions prior to 14.000 Rockwell Automation Micrologix 1400 affected versions not specified Description The issue is related to an Incorrect Permission Assignment for Critical...
MicroLogix 1100 PLC Default Credentials
The remote device appears to be a MicroLogix 1100 PLC that can be accessed using default HTTP credentials. An attacker could leverage this issue to gain administrative access to the affected device. Binary data scadamicrologixdefaulthttp.nbin...
CVE-2009-3739
Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...
CVE-2009-3739
Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...
CVE-2009-3739: Undefined Security Weakness
Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...
C4 SCADA Security Advisory - Rockwell Automation (Allen Bradley) Multiple Vulnerabilities in Micrologix 1100 & 1400 Series Controllers
Background ----------------- Vendor product information, from www.ab.com : With online editing and a built-in 10/100 Mbps EtherNet/IP port for peer-to-peer messaging, the MicroLogix 1100 controller adds greater connectivity and application coverage to the MicroLogix family of Allen-Bradley...