Published: 06/02/2009 Updated: 08/03/2011

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 606

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
rockwellautomation controllogix 1756-enbt\\/a ethernet\\/ ip bridge -

Simple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A

Description Simple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A Vulnerability Details wwwcvedetailscom/cve/CVE-2009-0473/ Requirements Python 27 You must be running an X Windows environment before executing this script It will use Python’s “webbrowser” library to open the site using the default browser

Simple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A

Description Simple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A Vulnerability Details wwwcvedetailscom/cve/CVE-2009-0473/ Requirements Python 27 You must be running an X Windows environment before executing this script It will use Python’s “webbrowser” library to open the site using the default browser

CWE-59 http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729 http://www.securityfocus.com/bid/33636 http://www.kb.cert.org/vuls/id/619499 http://secunia.com/advisories/33783 http://www.vupen.com/english/advisories/2009/0347 https://nvd.nist.gov https://github.com/akbarq/CVE-2009-0473-check

CVE-2009-0473

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect