ICSA-15-300-03A

icsaUScisa_csaf_ot

Rockwell Automation Micrologix 1100 and 1400 PLC Systems Vulnerabilities (Update A)

view advisory published 2015-07-30

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2015-6492UShigh7.8—
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device cra…
CVE-2015-6491USmedium4.0—
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FR…
CVE-2015-6490UShigh10.0—
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via…
CVE-2015-6488USmedium4.3—
Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers…
CVE-2015-6486USmedium6.5—
SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan