Denial of service

An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious...

CVE-2020-6087

CVE-2020-6087 affects Allen-Bradley Flex IO 1794-AENT/B (Series B) via the ENIP Request Path Data Segment. The vulnerability occurs when the ANSI Extended Symbol Segment Sub-Type is used; the following byte is treated as the Data Size in words, and if it exceeds the packet data, the device faults...

CVE-2020-6086

CVE-2020-6086 affects Allen-Bradley Flex IO 1794-AENT/B (EtherNet/IP ENIP) in the ENIP Request Path Data Segment. The issue is triggered when a Simple Data Segment Sub-Type is used: the byte after the segment is treated as the Data Size in words, and if that value exceeds the remaining packet dat...