627 matches found
Rockwell Automation MicroLogix 1100 and 1400 Vulnerabilities
OVERVIEW This advisory was originally posted to the NCCIC Portal library on December 1, 2016, and is being released to the NCCIC/ICS-CERT web site. Alexey Osipov and Ilya Karpov of Positive Technologies have identified vulnerabilities in Rockwell Automation’s Allen-Bradley MicroLogix 1100 and 140...
CVE-2016-5645
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community...
Hardcoded credentials
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community...
CVE-2016-5645
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community...
CVE-2016-5645
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community...
CVE-2016-5645
The provided Connected documents confirm a concrete issue: Rockwell Automation MicroLogix 1400 PLCs (models 1766-L32BWA/AWA/BXB/WAA, 1766-L32BXBA etc.) expose an undocumented privileged SNMP community string (“wheel”) alongside standard public/private, granting read/write access. This enables rem...
CVE-2016-5645: Improper Access Control
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community...
Rockwell Automation MicroLogix Remote Code Execution (CVE-2016-5645)
A remote code execution vulnerability exists in Rockwell Automation MicroLogix. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Rockwell Automation/Allen-Bradley MicroLogix 1400 SNMP Remote Privilege Escalation
Binary data 7221.pasl...
Rockwell Automation MicroLogix Remote Lift Vulnerability
Rockwell Automation MicroLogix 1400 1766-L32BXBA and others are programmable logic controllers PLCs from Rockwell Automation. A remote elevation vulnerability exists in Rockwell Automation MicroLogix 1400. An attacker could use this vulnerability to gain elevated privileges and perform unauthoriz...
AB Rockwell Automation MicroLogix 1400 Code Execution Vulnerability
Talos Vulnerability Report TALOS-2016-0184 AB Rockwell Automation MicroLogix 1400 Code Execution Vulnerability August 11, 2016 CVE Number CVE-2016-5645 Description An exploitable Use of Hard-coded Credentials Undocumented Community String vulnerability exists in the SNMP functionality of...
The vulnerability of the embedded software for MicroLogix 1100 and MicroLogix 1400 allows a intruder to execute arbitrary code.
The vulnerability of the embedded software in MicroLogix 1100 and MicroLogix 1400 programs exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a hacker to execute arbitrary code when a user clicks on a pre-prepared link...
The vulnerability in the embedded software of MicroLogix 1100 and MicroLogix 1400 allows a hacker to execute SQL code.
The vulnerability of the embedded software in MicroLogix 1100 and MicroLogix 1400 programs lies in the lack of protection for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code, resulting in the creation or deletion of accounts, or the elevation o...
MicroLogix 1400 PLC Web Server Multiple Vulnerabilities
Binary data scadaRA763251400.nbin...
MicroLogix 1400 PLC Web Server Request Handling RCE
Binary data scadaRA763261400.nbin...
Rockwell Automation MicroLogix 1400 SNMP Credentials Vulnerability
OVERVIEW Cisco Talos, Cisco Systems, Inc.'s security intelligence and research group reported to Rockwell Automation that an undocumented and privileged Simple Network Management Protocol SNMP community string exists in MicroLogix 1400 programmable logic controllers PLC. Rockwell Automation has...
Rockwell Automation/Allen-Bradley MicroLogix 1400 1766-L32xxx Series A < 7.000 / Series B <= 11.000 HTTP Remote DoS
Binary data 7199.pasl...
Rockwell Automation/Allen-Bradley MicroLogix 1100 L16xxx < 10.000 HTTP Remote DoS
Binary data 7198.pasl...