MKLogic-500 PLC Pre-set Credentials Access

The vulnerability of the PLK MKLogic-500 is related to the presence of pre-installed account data. Exploiting this vulnerability can allow a remote attacker to gain access to the contents of the FTP server...

FTP Server PLC MKLogic-500 Improper Access Control DoS

The vulnerability of the FTP server PLC MKLogic-500 is related to improper access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

MKLogic-500 PLC Full Control

The vulnerability of the MKLogic-500 PLC is related to the presence of hidden features such as SSH access. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the device...

MKLogic-500 PLI Configuration Decryption

The vulnerability of the MKLogic-500 PLB protocol lies in the transmission of information sufficient to recover encryption keys in an open form. Exploiting this vulnerability allows a malicious actor to decrypt the PLB protocol and modify the device’s configuration...

MKLogic-500 PLC Authentication Bypass

The vulnerability of the MKLogic-500 PLC configuration protocol lies in the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker, operating remotely, to alter the device’s operating logic...

PT-2022-6337 · Unknown · Mklogic-500

Name of the Vulnerable Software and Affected Versions: MKLogic-500 affected versions not specified Description: The issue is related to the presence of hidden functionality, specifically SSH access, in the MKLogic-500. This could allow a remote attacker to gain full control over the device...

PT-2022-6336 · Unknown · Mklogic-500

Name of the Vulnerable Software and Affected Versions: MKLogic-500 affected versions not specified Description: The issue is related to improper access control in the FTP server of the MKLogic-500 PLC. It may allow a remote attacker to cause a denial of service. Recommendations: At the moment,...

PT-2022-6341 · Unknown · Mklogic-500

Name of the Vulnerable Software and Affected Versions: MKLogic-500 affected versions not specified Description: The issue is related to a lack of authentication for a critical function in the MKLogic-500 PLC configuration protocol. This could allow a remote attacker to modify the device's logic,...

PT-2022-6340 · Unknown · Mklogic-500

Name of the Vulnerable Software and Affected Versions: MKLogic-500 affected versions not specified Description: The issue is related to the transmission of information sufficient for recovering encryption keys in plain text, which could allow a remote attacker to decrypt the configuration protoco...