CVE-2017-7903

CVE-2017-7903 refers to a vulnerability in Rockwell Automation Allen-Bradley MicroLogix 1100/1400 PLCs due to weak password requirements: numeric passwords with small maximum length used by models such as 1763-L16AWA/B, 1763-L16DWD and 1766-L32 variants (firmware 16.00 and prior). Root cause: wea...

CVE-2017-7901

CVE-2017-7901 affects Rockwell Automation Allen-Bradley MicroLogix 1100 (1763-L16A.. series A/B, 16.00 and earlier) and MicroLogix 1400 (1766-L32A.. series A/B, 16.00 and earlier). Root cause: generation of insufficiently random TCP initial sequence numbers , enabling an attacker to predict numbe...

PT-2017-17982 · Rockwell Automation · Micrologix 1100 +1

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers versions 16.00 and prior Rockwell Automation Allen-Bradley MicroLogix 1400 programmable logic controllers versions 16.00 and prior Description: A Predictable Val...

Unspecified Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation Allen-Bradley MicroLogix 1100 1763-L16AWA Series A and others are programmable logic controller PLC products from Rockwell Automation. A security vulnerability exists in several Rockwell Automation products. An attacker could exploit the vulnerability to gain unauthorized acce...

Information Disclosure Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation Allen-Bradley MicroLogix 1100 1763-L16AWA Series A and others are programmable logic controller PLC products from Rockwell Automation. An information disclosure vulnerability exists in multiple Rockwell Automation products. An attacker could exploit this vulnerability to recov...

Rockwell Automation MicroLogix 1100 Controllers

CVSS v3 7.5 Vendor: Rockwell Automation Equipment: MicroLogix 1100 Controllers Vulnerability: Improper Input Validation REPOSTED INFORMATION This advisory was originally posted to the NCCIC Portal on May 18, 2017, and is being released to the NCCIC/ICS-CERT web site. AFFECTED PRODUCTS The followi...

CVE-2016-9334

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

CVE-2016-9334

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

CVE-2016-9338

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

CVE-2016-9338

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

Code injection

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

Design/Logic Flaw

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

CVE-2016-9338

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

CVE-2016-9334

CVE-2016-9334 affects Rockwell Automation Allen-Bradley MicroLogix 1100/1400 PLCs. The issue is cleartext transmission of credentials over the device web server, making credentials observable to anyone monitoring traffic. Affected MicroLogix 1100 controllers include 1763-L16AWA, 1763-L16BBB, 1763...

CVE-2016-9338

CVE-2016-9338 affects Rockwell Automation Allen‑Bradley MicroLogix 1100 controllers (1763-L16AWA/BBA/BWA/DWD, Series A/B, prior to firmware 15.000 for 1100 Series B; and related 1400 variants) due to an Incorrect Permission Assignment for a Critical Resource . This design flaw allows administrato...

Rockwell Automation MicroLogix 1100 and 1400 Unauthorized Access Vulnerability

Rockwell Automation is a British company that provides industrial automation control and globalized information. the MicroLogix 1100 and 1400 series products are used in food, agriculture, and water and wastewater systems, among other applications. An unauthorized access vulnerability exists in...

Rockwell Automation MicroLogix 1100 and 1400 Denial of Service Vulnerability

Rockwell Automation is a British company that provides industrial automation control and globalized information. the MicroLogix 1100 and 1400 series products are used in food, agriculture, and water and wastewater systems, to name a few. A denial of service vulnerability exists in Rockwell...

Rockwell Automation MicroLogix 1100 and 1400 Vulnerabilities

OVERVIEW This advisory was originally posted to the NCCIC Portal library on December 1, 2016, and is being released to the NCCIC/ICS-CERT web site. Alexey Osipov and Ilya Karpov of Positive Technologies have identified vulnerabilities in Rockwell Automation’s Allen-Bradley MicroLogix 1100 and 140...

The vulnerability in the embedded software of MicroLogix 1100 and MicroLogix 1400 allows a hacker to execute SQL code.

The vulnerability of the embedded software in MicroLogix 1100 and MicroLogix 1400 programs lies in the lack of protection for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code, resulting in the creation or deletion of accounts, or the elevation o...

The vulnerability of the embedded software for MicroLogix 1100 and MicroLogix 1400 allows a intruder to execute arbitrary code.

The vulnerability of the embedded software in MicroLogix 1100 and MicroLogix 1400 programs exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a hacker to execute arbitrary code when a user clicks on a pre-prepared link...