5 matches found
Rockwell Automation MicroLogix Improper Authentication (CVE-2017-12089)
An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a device fault resulting in halted operations. An attacker can send an unauthenticated packet to trigger...
Rockwell Automation MicroLogix Controllers and RSLogix 500 Software Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-6984)
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable. This plugin only works...
Rockwell Automation ControlLogix controllers Improper Authentication (CVE-2012-6440)
The web-server password-authentication functionality in Rockwell Automation MicroLogix 1100 and 1400 allows man-in-the-middle attackers to conduct replay attacks via HTTP traffic. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Rockwell Automation 1766 Improper Access Control (CVE-2016-5645)
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community. This plugin...