Allen-Bradley MicroLogix Cross-Site Scripting Vulnerability

Allen-Bradley MicroLogix is a programmable logic controller PLC from Rockwell Automation. A cross-site scripting vulnerability exists in Allen-Bradley MicroLogix 1100 before B FRN 15.000 and 1400 before B FRN 15.003. Allows remote attackers to inject arbitrary web script or HTML via unspecified...

Rockwell Automation 1766-L32 Series Remote File Inclusion Vulnerability

The Rockwell Automation 1766-L32 Series is a 1766-L32 series programmable logic controller PLC. The Rockwell Automation 1766-L32 Series fails to adequately filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting a special request to view the contents of...

Siemens SIMATIC S7-1200 PLC < 4.1 Open Redirection

Binary data scadasiemenssimatics71200plcopenredirection.nbin...

Security audits

A presentation on Project Basecamp was a highlight of the conference. The talk presented the findings of a volunteer-led security audit of leading programmable logic controllers PLCs. The audit found that decrepit hardware, buggy software and pitiful or nonexistent security features make thousand...