563 matches found
Rockwellautomation Micrologix Unspecified Vulnerability
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...
Rockwellautomation Controllogix Unspecified Vulnerability
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and...
Rockwellautomation Micrologix Improper Input Validation
An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted packet can cause a device power cycle resulting in a fault state and deletion of ladder logic. An attacker can send one...
Rockwellautomation Micrologix URL Redirection to Untrusted Site ('Open Redirect')
In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers...
Rockwellautomation Micrologix Missing Authentication for Critical Function
Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...
Rockwellautomation 1763-l16awa Exposure of Sensitive Information to an Unauthorized Actor
An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00...
Rockwellautomation 1763-l16awa Inadequate Encryption Strength
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version...
Rockwellautomation Micrologix Exposure of Sensitive Information to an Unauthorized Actor
An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated...
Rockwellautomation Micrologix Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors. File data ot500134.nasl...
Rockwellautomation Micrologix Unspecified Vulnerability
An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a device fault resulting in halted operations. An attacker can send an unauthenticated packet to trigger...
Rockwellautomation Micrologix Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. File data ot500038.nasl...
Rockwellautomation Micrologix Unspecified Vulnerability
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...
Rockwell Automation MicroLogix 1100 and 1400 <= 16.0 Improper Information Handling (ICSA-17-115-04)
Binary data 720295.prm...
Rockwell Automation MicroLogix 1100 <= 16.0 and MicroLogix 1400 <= 21.003 Improper Authentication (ICSA-18-095-01)
Binary data 720294.prm...
Rockwell Automation/Allen-Bradley MicroLogix 1400 Series A <= 7 and Series B <= 15.000 DNP3 Remote DoS
Binary data 64.prm...
Rockwell Automation/Allen-Bradley MicroLogix 1100 L16xxx < 10.000 HTTP Remote DoS
Binary data 76.prm...
Rockwell Automation/Allen-Bradley MicroLogix 1400 1766-L32xxx Series A < 7.000 / Series B <= 11.000 HTTP Remote DoS
Binary data 77.prm...
Rockwell Automation/Allen-Bradley MicroLogix 1400 SNMP Remote Privilege Escalation
Binary data 70.prm...
Rockwell Automation MicroLogix 1100/1400 and CompactLogix 5370 Controllers Open Redirection Vulnerability
The Rockwell Automation MicroLogix 1100/1400 or CompactLogix 5370 controller web server is affected by an open redirect vulnerability. An unauthenticated remote attacker can exploit this issue in conjunction with a social engineering attack to redirect the user to a malicious site that could run ...