Rockwell Automation Micrologix Improper Access Control (CVE-2017-14466)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Denial of Service

Binary data 720100.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Authentication Bypass

Binary data 720101.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Denial of Service

Binary data 720099.prm...

CVE-2017-12092

An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated...

CVE-2017-12092: Exposure of Sensitive Information to an Unauthorized Actor

An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated...

Rockwell Automation Allen Bradley Micrologix 1400 Series B FRN Denial of Service Vulnerability (CNVD-2018-07297)

Allen Bradley Micrologix 1400 Series B is a programmable logic controller from Rockwell Automation. A denial of service vulnerability exists in the program download feature of the Allen Bradley Micrologix 1400 Series B version 21.2 and lower. An attacker could exploit this vulnerability by sendin...

Allen Bradley Micrologix 1400 Series B FRN Access Control Vulnerability (CNVD-2018-08281)

Allen Bradley Micrologix 1400 Series B FRN is a programmable logic controller from Rockwell Automation. An access control vulnerability exists in the Data, Program, and Function File Permissions function of the Allen Bradley Micrologix 1400 Series B FRN version 21.2 and earlier.The STI, EII, and...

Denial of service

An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a device power cycle...

CVE-2017-14462

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

PT-2018-5661 · Allen Bradley · Allen Bradley Micrologix 1400 Series B

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B FRN versions 21.2 and before Description: The issue concerns a problem with access control in the data, program, and function file permissions functionality. This can be exploited by sending specially...

CVE-2017-14469: Undefined Security Weakness

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-12093: Uncontrolled Resource Consumption

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to...

CVE-2017-14463: Undefined Security Weakness

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14462: Undefined Security Weakness

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14472: Undefined Security Weakness

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14473: Undefined Security Weakness

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14468: Undefined Security Weakness

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14471: Undefined Security Weakness

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-12089: Undefined Security Weakness

An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a device fault resulting in halted operations. An attacker can send an unauthenticated packet to trigger...