ICSA-15-300-03A

icsaUScisa_csaf_ot

Rockwell Automation Micrologix 1100 and 1400 PLC Systems Vulnerabilities (Update A)

Advisory ansehen veröffentlicht 2015-07-30

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (5)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2015-6492UShigh7.8—
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device cra…
CVE-2015-6491USmedium4.0—
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FR…
CVE-2015-6490UShigh10.0—
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via…
CVE-2015-6488USmedium4.3—
Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers…
CVE-2015-6486USmedium6.5—
SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (10)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan