rockwellautomation Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/rockwellautomation/ Sun, 26 Feb 2023 06:47:37 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png rockwellautomation Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/rockwellautomation/ 32 32 CVE-2018-17924 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17924/ Sun, 26 Feb 2023 06:47:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17924/ Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller in the system is set to Hard RUN mode. When the affected device […]

The post CVE-2018-17924 appeared first on CVE Vulnerability.

]]> Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller in the system is set to Hard RUN mode. When the affected device accepts this new IP configuration, a loss of communication occurs between the device and the rest of the system as the system traffic is still attempting to communicate with the device via the overwritten IP address.

The post CVE-2018-17924 appeared first on CVE Vulnerability.

]]> CVE-2020-6998 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6998/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6998/ The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products.

The post CVE-2020-6998 appeared first on CVE Vulnerability.

]]> The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products.

The post CVE-2020-6998 appeared first on CVE Vulnerability.

]]> CVE-2020-6990 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6990/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6990/ Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further […]

The post CVE-2020-6990 appeared first on CVE Vulnerability.

]]> Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further cryptographic attacks that could ultimately lead to a remote attacker gaining unauthorized access to the controller.

The post CVE-2020-6990 appeared first on CVE Vulnerability.

]]> CVE-2020-6988 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6988/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6988/ Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client with used password values […]

The post CVE-2020-6988 appeared first on CVE Vulnerability.

]]> Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client with used password values to authenticate the user on the client-side. This method of authentication may allow an attacker to bypass authentication altogether, disclose sensitive information, or leak credentials.

The post CVE-2020-6988 appeared first on CVE Vulnerability.

]]> CVE-2020-6984 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6984/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6984/ Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.

The post CVE-2020-6984 appeared first on CVE Vulnerability.

]]> Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.

The post CVE-2020-6984 appeared first on CVE Vulnerability.

]]> CVE-2020-6980 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6980/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6980/ Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol (SMTP) account data is saved in RSLogix 500, a local attacker with access to a victim’s project may be able to gather SMTP server authentication […]

The post CVE-2020-6980 appeared first on CVE Vulnerability.

]]> Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol (SMTP) account data is saved in RSLogix 500, a local attacker with access to a victim’s project may be able to gather SMTP server authentication data as it is written to the project file in cleartext.

The post CVE-2020-6980 appeared first on CVE Vulnerability.

]]> CVE-2020-6111 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6111/ Sun, 26 Feb 2023 06:42:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6111/ An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series B FRN 15.000, Series B FRN 14.000, Series B FRN 13.000, Series B FRN 12.000, Series B FRN 11.000 and Series B FRN 10.000. A specially crafted packet can […]

The post CVE-2020-6111 appeared first on CVE Vulnerability.

]]> An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series B FRN 15.000, Series B FRN 14.000, Series B FRN 13.000, Series B FRN 12.000, Series B FRN 11.000 and Series B FRN 10.000. A specially crafted packet can cause a major error, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.

The post CVE-2020-6111 appeared first on CVE Vulnerability.

]]> CVE-2019-10954 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10954/ Sun, 26 Feb 2023 06:29:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10954/ An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 to 30.014 and earlier.

The post CVE-2019-10954 appeared first on CVE Vulnerability.

]]> An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 to 30.014 and earlier.

The post CVE-2019-10954 appeared first on CVE Vulnerability.

]]> CVE-2019-10970 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10970/ Sun, 26 Feb 2023 06:29:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10970/ In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system.

The post CVE-2019-10970 appeared first on CVE Vulnerability.

]]> In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system.

The post CVE-2019-10970 appeared first on CVE Vulnerability.

]]> CVE-2019-10955 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10955/ Sun, 26 Feb 2023 06:29:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10955/ In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers (includes CompactLogix GuardLogix controllers) v30.014 and earlier, an open redirect vulnerability could allow a remote unauthenticated […]

The post CVE-2019-10955 appeared first on CVE Vulnerability.

]]> In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers (includes CompactLogix GuardLogix controllers) v30.014 and earlier, an open redirect vulnerability could allow a remote unauthenticated attacker to input a malicious link to redirect users to a malicious site that could run or download arbitrary malware on the user’s machine.

The post CVE-2019-10955 appeared first on CVE Vulnerability.

]]>