Hardcoded credentials

A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmware Version 5.0.190. Vulnerable versions of Stride-Managed Ethernet switches and Sixnet-Managed...

CVE-2016-9335

CVE-2016-9335 affects Red Lion Controls Sixnet-Managed Industrial Switches (firmware 5.0.196) and AutomationDirect/Stride-Managed Ethernet Switches (firmware 5.0.190). The root cause is hard-coded HTTP SSL/SSH keys that cannot be regenerated, causing all devices to share the same key. Consequence...

ICSA-18-107-05_Rockwell Automation Stratix Industrial Managed Ethernet Switch

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit. Vendor : Rockwell Automation Equipment : Allen-Bradley Stratix Industrial Managed Ethernet Switch Vulnerabilities : Improper Input Validation, Resource Management Errors, 7PK – Errors, Improper...