Rockwell (CVE-2020-14504) (deprecated)

This plugin has been deprecated as POINT I/O modules are not currently supported. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2022/05/19...

CVE-2020-14504

The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings...

CVE-2020-14504

Rockwell Automation 1734-AENTR Series B/C are affected by CVE-2020-14504 due to an improper access control in the web interface that mishandles HTTP POST authentication, enabling a remote, unauthenticated attacker to modify configuration settings. Affected series and firmware info from sources in...

Rockwell Automation 1734-AENTR Series B and Series C

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: 1734-AENTR Series B and Series C Vulnerabilities: Improper Access Control, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities...