Rockwell Automation 1794-AENT Flex I/O Series B

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: 1794-AENT Flex I/O Series B Vulnerabilities: Classic Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being...

CVE-2020-6085

CVE-2020-6085 affects Allen-Bradley Flex IO 1794-AENT/B (4.003) via the ENIP Request Path Logical Segment. A specially crafted Electronic Key Segment with fewer than 0x18 bytes after the Key Format field can cause the device to fault and stop remote communications, resulting in a denial-of-servic...