Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 Exposure of Sensitive Information to an Unauthorized Actor (CVE-2017-7899)

An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00...

CVE-2017-7899

CVE-2017-7899 affects Rockwell Automation Allen-Bradley MicroLogix 1100 (1763-L16Axx, DWD) and MicroLogix 1400 (1766-L32Axx, BWAA, etc.) PLCs. The root issue is Information Exposure: user credentials are sent to the web server via HTTP GET requests, enabling potential unauthorized retrieval. Conn...