Rockwell Automation MicroLogix 1400 SNMP Credentials Vulnerability

OVERVIEW Cisco Talos, Cisco Systems, Inc.'s security intelligence and research group reported to Rockwell Automation that an undocumented and privileged Simple Network Management Protocol SNMP community string exists in MicroLogix 1400 programmable logic controllers PLC. Rockwell Automation has...

Rockwell Automation/Allen-Bradley MicroLogix 1400 1766-L32xxx Series A < 7.000 / Series B <= 11.000 HTTP Remote DoS

Binary data 7199.pasl...

Rockwell Automation MicroLogix 1400 PLC Web Server Detection

Binary data scadarockwellmicrologix1400plcwebserverdetect.nbin...

Rockwell Automation MicroLogix 1400 PLC Default Credentials

Binary data scadarockwellmicrologix1400plcdefaulthttp.nbin...

Rockwell Automation /Allen-Bradley MicroLogix 1400 Embedded Web Server 弱口令

No description provided by source...

The vulnerability of the microprogramming software for Micrologix 1100 and 1400 allows a intruder to inject content from an arbitrary file into the FRAME element.

The vulnerability of the microprogrammed logic controllers Micrologix 1100 and 1400 lies in the lack of restrictions on the download of files. Exploiting this vulnerability allows a malicious actor to inject any file content into the FRAME element remotely...

Vulnerability of microprogrammed software for Micrologix 1100 and 1400 programmable logic controllers, allowing a intruder to execute arbitrary code

The vulnerability of the microprogrammed logic controllers Micrologix 1100 and 1400 is caused by buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of the microprogramming software used in Micrologix 1100 and 1400 programmable logic controllers, allowing intruders to inject arbitrary web or HTML code

The vulnerability of Micrologix 1100 and 1400 microprogrammed logic controllers’ web servers exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

Allen-Bradley MicroLogix Arbitrary File Insertion Vulnerability

Allen-Bradley MicroLogix is a programmable logic controller PLC from Rockwell Automation. An arbitrary file insertion vulnerability exists in Allen-Bradley MicroLogix 1100 before B FRN 15.000 and 1400 before B FRN 15.003. It allows an authenticated remote user to insert the contents of an arbitra...

Allen-Bradley MicroLogix Stack Buffer Overflow Vulnerability

Allen-Bradley MicroLogix is a programmable logic controller PLC from Rockwell Automation. A stack buffer overflow vulnerability exists in Allen-Bradley MicroLogix 1100 prior to B FRN 15.000 and 1400 prior to B FRN 15.003. Allowing a remote attacker to execute arbitrary code via unspecified vector...

Sql injection

SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-6492

Rockwell Automation’s MicroLogix 1100 and 1400 PLCs are affected by CVE-2015-6492, which allows a remote attacker to cause a denial of service via a crafted HTTP request. Affected devices: MicroLogix 1100 hardware Series B with firmware version 14.000 or earlier (B FRN 15.000 mitigation) and Micr...

CVE-2015-6492

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service memory corruption and device crash via a crafted HTTP request...

CVE-2015-6490

Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-6486

CVE-2015-6486 describes an SQL injection in Rockwell Automation’s MicroLogix 1100 and 1400 PLCs. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Affected products: MicroLogix 1100 (hardware Series B, firmware 14.000 and earlier; mitig...

PT-2015-2582

Name of the Vulnerable Software and Affected Versions Allen-Bradley MicroLogix 1100 versions before B FRN 15.000 Allen-Bradley MicroLogix 1400 versions before B FRN 15.003 Description The issue is caused by a buffer overflow, allowing a remote attacker to cause a denial of service via a specially...

PT-2015-2585

Name of the Vulnerable Software and Affected Versions Allen-Bradley MicroLogix 1100 versions before B FRN 15.000 Allen-Bradley MicroLogix 1400 versions before B FRN 15.003 Description The issue is related to a cross-site scripting XSS vulnerability in the web server of the affected devices. This...

PT-2015-2583

Name of the Vulnerable Software and Affected Versions Allen-Bradley MicroLogix 1100 versions before B FRN 15.000 Allen-Bradley MicroLogix 1400 versions before B FRN 15.003 Description The issue is related to a lack of restrictions on file uploads in the programmable logic controllers MicroLogix...

PT-2015-2584

Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions before B FRN 15.000 Micrologix 1400 versions through B FRN 15.003 Description The issue is caused by a stack-based buffer overflow. This allows a remote attacker to execute arbitrary code. Recommendations For Micrologi...

PT-2015-2586

Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions before B FRN 15.000 Micrologix 1400 versions before B FRN 15.003 Description The issue is related to a lack of protection against SQL query structure attacks. Exploitation of this issue may allow a remote attacker to...