627 matches found
CVE-2015-6491: Undefined Security Weakness
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...
PT-2015-2583
Name of the Vulnerable Software and Affected Versions Allen-Bradley MicroLogix 1100 versions before B FRN 15.000 Allen-Bradley MicroLogix 1400 versions before B FRN 15.003 Description The issue is related to a lack of restrictions on file uploads in the programmable logic controllers MicroLogix...
PT-2015-2586
Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions before B FRN 15.000 Micrologix 1400 versions before B FRN 15.003 Description The issue is related to a lack of protection against SQL query structure attacks. Exploitation of this issue may allow a remote attacker to...
PT-2015-2585
Name of the Vulnerable Software and Affected Versions Allen-Bradley MicroLogix 1100 versions before B FRN 15.000 Allen-Bradley MicroLogix 1400 versions before B FRN 15.003 Description The issue is related to a cross-site scripting XSS vulnerability in the web server of the affected devices. This...
PT-2015-2584
Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions before B FRN 15.000 Micrologix 1400 versions through B FRN 15.003 Description The issue is caused by a stack-based buffer overflow. This allows a remote attacker to execute arbitrary code. Recommendations For Micrologi...
PT-2017-52: Information Disclosure in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in programmable-logic controllers, caused by sending user credentials to the web server using a HTTP GET method, allows attacker...
PT-2015-3357
Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions prior to 16.00 Micrologix 1400 versions prior to 16.00 Description The issue is related to the use of weak passwords, specifically numeric passwords with a small maximum character size. This could allow a remote attack...
PT-2015-3356
Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers versions 16.00 and prior Rockwell Automation Allen-Bradley MicroLogix 1400 programmable logic controllers versions 16.00 and prior Description An Information...
PT-2017-53: Weak Password in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected weak passwords in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in programmable-logic controllers, due to usage of numeric passwords with a small maximum character size for the password, allows attackers to bypass...
Rockwell Automation ControlLogix 远程拒绝服务漏洞
漏洞起因 边界条件错误影响系统Rockwell Automation Micrologix 1400 Rockwell Automation Micrologix 1100远程攻击者可以利用漏洞使设备崩溃。攻击所需条件 攻击者必须访问Rockwell Automation MicroLogix产品。漏洞信息Rockwell Automation MicroLogix是一款可编程控制器平台。 设备没有校验要拷贝到缓冲区的数据，允许远程攻击者可以向2222/TCP, 2222/UDP,...
Rockwell Automation MicroLogix 1100 PLC Default Credentials
Binary data scadarockwellmicrologix1100plcdefaulthttp.nbin...
Rockwell Automation MicroLogix 1100 PLC < FRN 10.0 Authentication Mechanism DoS
Binary data scadarockwellmicrologix1100plcdos278864.nbin...
Rockwell Automation MicroLogix 1100 PLC < Series B FRN 13.0 Multiple Vulnerabilities
Binary data scadarockwellmicrologix1100plcdos470154.nbin...
Rockwell Automation MicroLogix 1100 PLC Web Server Detection
Binary data scadarockwellmicrologix1100plcwebserverdetect.nbin...
Rockwell Automation MicroLogix 1100 PLC < Series B FRN 12.0 MitM Replay Authentication Bypass
Binary data scadarockwellmicrologix1100plcmitm470156.nbin...
PT-2015-17: SQL injection in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected an SQL injection vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. SQL injection vulnerability exists on Allen-Bradly MicroLogix 1100 and 1400 due to the improper sanitization of user input, which allows remote...
PT-2017-02: Insufficient Permissions in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected an Insufficient Permissions vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in Allen-Bradly MicroLogix 1100 and 1400 allows remote attackers with administrative privileges to remove all administrators...
PT-2015-16: Cross-site scripting in Rockwell Automation Micrologix 1100 and 1400 PLC
The specialists of the Positive Research center have detected a Cross-site scripting vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Cross-site scripting vulnerability in the web server on Allen-Bradly MicroLogix 1100 and 1400 devices allows remote attackers to inject arbitrary...