micrologix_1400_b_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/micrologix_1400_b_firmware/ Sun, 26 Feb 2023 06:42:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png micrologix_1400_b_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/micrologix_1400_b_firmware/ 32 32 CVE-2020-6984 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6984/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6984/ Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.

The post CVE-2020-6984 appeared first on CVE Vulnerability.

]]> Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.

The post CVE-2020-6984 appeared first on CVE Vulnerability.

]]> CVE-2020-6988 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6988/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6988/ Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client with used password values […]

The post CVE-2020-6988 appeared first on CVE Vulnerability.

]]> Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client with used password values to authenticate the user on the client-side. This method of authentication may allow an attacker to bypass authentication altogether, disclose sensitive information, or leak credentials.

The post CVE-2020-6988 appeared first on CVE Vulnerability.

]]> CVE-2020-6990 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6990/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6990/ Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further […]

The post CVE-2020-6990 appeared first on CVE Vulnerability.

]]> Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further cryptographic attacks that could ultimately lead to a remote attacker gaining unauthorized access to the controller.

The post CVE-2020-6990 appeared first on CVE Vulnerability.

]]>