Lucene search
+L

568 matches found

Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.23 views

Rockwell Automation MicroLogix SQL Injection (CVE-2015-6486)

SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This plugin only works with Tenable.ot. Please visit...

6.5CVSS6AI score0.04292EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.28 views

Rockwell Automation ControlLogix controllers Resource Management Errors (CVE-2012-6435)

Rockwell Automation SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 allow remote attackers to cause a denial of service control and communication outage via a CIP message that specifies a...

7.8CVSS5.4AI score0.33499EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.18 views

Rockwell Automation MicroLogix Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2015-6492)

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service memory corruption and device crash via a crafted HTTP request. This plugin only works with Tenable.ot. Please visit...

7.8CVSS5.8AI score0.0448EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.29 views

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14472)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

10CVSS7.4AI score0.36844EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.20 views

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14465)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

10CVSS7.3AI score0.34166EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.27 views

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules Missing Authentication For Critical Function (CVE-2018-17924)

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

8.6CVSS7.8AI score0.04335EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.41 views

Rockwell Automation MicroLogix Controllers and RSLogix 500 Software Use of Hard-Coded Cryptographic Key (CVE-2020-6990)

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file...

10CVSS7.4AI score0.04367EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.19 views

Rockwell Automation MicroLogix Improper Authentication (CVE-2017-12088)

An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted packet can cause a device power cycle resulting in a fault state and deletion of ladder logic. An attacker can send one...

8.6CVSS7.2AI score0.04467EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.24 views

Rockwell Automation Allen-Bradley Micrologix 1100 Improper Handling of Length Parameter Inconsistency (CVE-2020-6111)

An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series B FRN 15.000, Series B FRN 14.000, Series B FRN 13.000, Series B FRN 12.000, Series B FRN 11.000...

7.5CVSS7.2AI score0.04584EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.24 views

Rockwell Automation MicroLogix Resource Management Errors (CVE-2014-5410)

The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service process disruption via malformed packets over 1 an Ethernet network or 2 a...

7.1CVSS5.6AI score0.04171EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.22 views

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14470)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

10CVSS7.3AI score0.36844EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.32 views

Rockwell Automation MicroLogix Controllers and RSLogix 500 Software Use of Client-Side Authentication (CVE-2020-6988)

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim's MicroLogix...

7.5CVSS7.1AI score0.04017EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.25 views

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14463)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

10CVSS7.3AI score0.37729EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.25 views

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14471)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

10CVSS7.3AI score0.36844EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.24 views

Rockwell Automation MicroLogix Improper Authentication (CVE-2017-12092)

An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated...

7.5CVSS6.4AI score0.02679EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.24 views

Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 Predictable Value Range From Previous Values (CVE-2017-7901)

A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series...

9CVSS7.4AI score0.06674EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.32 views

Rockwell Automation MicroLogix Incorrect Permission Assignment for Critical Resource (CVE-2016-9338)

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

4CVSS6.1AI score0.02426EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.28 views

Rockwell Automation MicroLogix 1400 and CompactLogix 5370 Controllers URL Redirection to Untrusted Site (CVE-2019-10955)

In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers...

6.1CVSS6.5AI score0.03043EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.21 views

Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers Buffer Copy Without Checking Size of Input (CVE-2017-16740)

A Buffer Overflow issue was discovered in Rockwell Automation Allen- Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution. This plugin only works with Tenable.ot...

10CVSS8AI score0.07145EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.25 views

Rockwell Automation MicroLogix Improper Authentication (CVE-2017-12093)

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to...

5.3CVSS6.4AI score0.06113EPSS
SaveExploits1References3
Rows per page
Query Builder