CVE-2009-0473-check

描述 用于利用 Rockwell ControlLogix 1756-ENBT/A 开放重定向漏洞的简单脚本。 漏洞详情 https://www.cvedetails.com/cve/CVE-2009-0473/ 要求 Python 2.7 在执行此脚本之前，你必须运行 X Windows 环境。 它将使用 Python 的 “webbrowser” 库通过默认浏览器打开该站点。...

Rockwell Automation ControlLogix Redundancy Enhanced Module security vulnerabilities

Rockwell Automation ControlLogix Redundancy Enhanced Module is a core hardware component of Rockwell Automation. There is a security vulnerability present in the Rockwell Automation ControlLogix Redundancy Enhanced Module, which stems from processing specially crafted inputs. This vulnerability m...

EUVD-2025-24813

Malicious code in bioql PyPI...

The vulnerability of Rockwell Automation ControlLogix® Ethernet Module’s web processor allows a hacker to execute arbitrary code.

The vulnerability of Rockwell Automation ControlLogix® Ethernet Module web processors is related to the insecure initialization of resources when a specific IP address is used for connecting to the WDB agent. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2025-7353 Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...

Rockwell Automation Logix Controllers Uncontrolled Resource Consumption (CVE-2024-8626)

Due to a memory leak, a denial-of-service vulnerability exists in the affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain webpages of the product causing the affected products to become fully unavailable and require a power cycle to...

Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, and Compact GuardLogix 5380 Improper Input Validation (CVE-2024-7515)

A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...

Rockwell Automation ControlLogix 安全漏洞

Rockwell Automation ControlLogix is a controller from Rockwell Automation. A security vulnerability exists in Rockwell Automation ControlLogix that stems from a bypass issue where an attacker may be able to execute CIP commands to modify user items or device configurations on the controller...

Rockwell Automation Select Logix Communication Modules Stack-Based Buffer Overflow (CVE-2023-2262)

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously...

Rockwell Automation ControlLogix controllers Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2012-6438)

Buffer overflow in Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; allows remote attackers to cause a denial of service NIC...

CVE-2017-6024

A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause...