Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rockwellautomation micrologix 1400 firmware vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2015-6486
SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Rockwellautomation Micrologix 1400 FirmwareRockwellautomation Micrologix 1100 Firmware
4.3
CVSSv2
CVE-2015-6488
Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Rockwellautomation Micrologix 1100 FirmwareRockwellautomation Micrologix 1400 Firmware
10
CVSSv2
CVE-2015-6490
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote malicious users to execute arbitrary code via unspecified vectors.
Rockwellautomation Micrologix 1100 FirmwareRockwellautomation Micrologix 1400 Firmware
4
CVSSv2
CVE-2015-6491
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors.
Rockwellautomation Micrologix 1400 FirmwareRockwellautomation Micrologix 1100 Firmware
7.8
CVSSv2
CVE-2015-6492
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote malicious users to cause a denial of service (memory corruption and device crash) via a crafted HTTP request.
Rockwellautomation Micrologix 1400 FirmwareRockwellautomation Micrologix 1100 Firmware
7.8
CVSSv2
CVE-2012-6442
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and previous versions; CompactLogix 18 and...
Rockwellautomation Ethernet\\/ip Firmware -Rockwellautomation Compactlogix Firmware -Rockwellautomation Flexlogix Firmware -Rockwellautomation Flex I\\/o Ethernet\\/ip Firmware -Rockwellautomation Micrologix Firmware -Rockwellautomation Guardlogix Controllers Firmware 20Rockwellautomation Compactlogix Firmware 18Rockwellautomation Controllogix Firmware 18Rockwellautomation Guardlogix Firmware 18Rockwellautomation Softlogix Controllers Firmware 19Rockwellautomation Softlogix Firmware 18Rockwellautomation Compactlogix Controllers Firmware 19Rockwellautomation Controllogix Controllers Firmware 20
10
CVSSv2
CVE-2012-6437
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and previous versions; CompactLogix 18 and...
Rockwellautomation ControllogixRockwellautomation CompactlogixRockwellautomation GuardlogixRockwellautomation SoftlogixRockwellautomation Compactlogix L32e Controller -Rockwellautomation 1794-aentr Flex I\\/o Ethernet\\/ip Adapter -Rockwellautomation Compactlogix ControllersRockwellautomation Controllogix ControllersRockwellautomation 1756-enbt -Rockwellautomation 1756-eweb -Rockwellautomation 1768-enbt -Rockwellautomation 1768-eweb -Rockwellautomation MicrologixRockwellautomation Compactlogix L35e Controller -Rockwellautomation Flexlogix 1788-enbt Adapter -Rockwellautomation Softlogix ControllersRockwellautomation Guardlogix Controllers
7.5
CVSSv2
CVE-2016-5645
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote malicious users to load arbitrary firmware updates by leveraging knowledge of this...
Rockwellautomation 1766-l32awaa -Rockwellautomation 1766-l32bxba -Rockwellautomation 1766-l32awa -Rockwellautomation 1766-l32bxb -Rockwellautomation 1766-l32bwaa -Rockwellautomation 1766-l32bwa -
5
CVSSv2
CVE-2017-12093
An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitima...
Rockwellautomation Micrologix 1400 B Firmware
7.8
CVSSv2
CVE-2017-12090
An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a devic...
Rockwellautomation Micrologix 1400 B Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32886insecure direct object referenceCVE-2024-34342file inclusionCVE-2024-34562CVE-2024-34347CVE-2024-26026CVE-2024-4647unprivileged
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook