360 matches found
PT-2017-52: Information Disclosure in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in programmable-logic controllers, caused by sending user credentials to the web server using a HTTP GET method, allows attacker...
PT-2015-3356
Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers versions 16.00 and prior Rockwell Automation Allen-Bradley MicroLogix 1400 programmable logic controllers versions 16.00 and prior Description An Information...
PT-2015-3357
Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions prior to 16.00 Micrologix 1400 versions prior to 16.00 Description The issue is related to the use of weak passwords, specifically numeric passwords with a small maximum character size. This could allow a remote attack...
Rockwell Automation ControlLogix 远程拒绝服务漏洞
漏洞起因 边界条件错误影响系统Rockwell Automation Micrologix 1400 Rockwell Automation Micrologix 1100远程攻击者可以利用漏洞使设备崩溃。攻击所需条件 攻击者必须访问Rockwell Automation MicroLogix产品。漏洞信息Rockwell Automation MicroLogix是一款可编程控制器平台。 设备没有校验要拷贝到缓冲区的数据，允许远程攻击者可以向2222/TCP, 2222/UDP,...
PT-2017-02: Insufficient Permissions in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected an Insufficient Permissions vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in Allen-Bradly MicroLogix 1100 and 1400 allows remote attackers with administrative privileges to remove all administrators...
PT-2015-16: Cross-site scripting in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected a Cross-site scripting vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Cross-site scripting vulnerability in the web server on Allen-Bradly MicroLogix 1100 and 1400 devices allows remote attackers to inject arbitrary...
PT-2015-3316
Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 controller versions prior to 14.000 Rockwell Automation Micrologix 1400 affected versions not specified Description An issue was discovered where user credentials are sent to the web server in...
PT-2015-3315
Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 controller versions prior to 14.000 Rockwell Automation Micrologix 1400 affected versions not specified Description The issue is related to an Incorrect Permission Assignment for Critical...
Rockwell Automation/Allen-Bradley MicroLogix 1400 Series A <= 7 and Series B <= 15.000 DNP3 Remote DoS
Binary data 7147.pasl...
Rockwell Automation/Allen-Bradley MicroLogix 1400 Detection
Binary data 7146.pasl...
CVE-2014-5410
The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service process disruption via malformed packets over 1 an Ethernet network or 2 a...
Double free
The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service process disruption via malformed packets over 1 an Ethernet network or 2 a...
CVE-2014-5410 Rockwell Automation Micrologix 1400 Improper Input Validation
The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service process disruption via malformed packets over 1 an Ethernet network or 2 a...
PT-2014-6457
Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers versions 7 and earlier Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx B FRN controllers versions prior to 15.001 Description The issue allows remote...
CVE-2014-5410: Improper Input Validation
The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service process disruption via malformed packets over 1 an Ethernet network or 2 a...
Rockwell Micrologix 1400 DNP3 DOS Vulnerability
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on September 11, 2014, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Matthew Luallen of CYBATI has identified a denial-of-service DoS vulnerability to the DNP3 implementation of the...
CVE-2009-3739
Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...
CVE-2009-3739
Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...
CVE-2009-3739: Undefined Security Weakness
Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...
C4 SCADA Security Advisory - Rockwell Automation (Allen Bradley) Multiple Vulnerabilities in Micrologix 1100 & 1400 Series Controllers
Background ----------------- Vendor product information, from www.ab.com : With online editing and a built-in 10/100 Mbps EtherNet/IP port for peer-to-peer messaging, the MicroLogix 1100 controller adds greater connectivity and application coverage to the MicroLogix family of Allen-Bradley...