Vulnerabilities > Rockwellautomation > High

DATE CVE VULNERABILITY TITLE RISK
2018-06-25 CVE-2017-9312 Improper Input Validation vulnerability in Rockwellautomation Allen-Bradley L30Erms Firmware
Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial of service.
network
low complexity
rockwellautomation CWE-20
7.8
2018-05-11 CVE-2017-6015 Injection vulnerability in Rockwellautomation Factorytalk Activation
Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous, which may allow an attacker to link to or run a malicious executable.
local
low complexity
rockwellautomation CWE-74
7.2
2018-04-05 CVE-2017-14473 Unspecified vulnerability in Rockwellautomation Micrologix 1400 B Firmware
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before.
network
low complexity
rockwellautomation
7.5
2018-04-05 CVE-2017-14472 Unspecified vulnerability in Rockwellautomation Micrologix 1400 B Firmware
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before.
network
low complexity
rockwellautomation
7.5
2018-04-05 CVE-2017-14471 Unspecified vulnerability in Rockwellautomation Micrologix 1400 B Firmware
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before.
network
low complexity
rockwellautomation
7.5
2018-04-05 CVE-2017-14470 Unspecified vulnerability in Rockwellautomation Micrologix 1400 B Firmware
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before.
network
low complexity
rockwellautomation
7.5
2018-04-05 CVE-2017-14469 Unspecified vulnerability in Rockwellautomation Micrologix 1400 B Firmware
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before.
network
low complexity
rockwellautomation
7.5
2018-04-05 CVE-2017-12090 Resource Exhaustion vulnerability in Rockwellautomation Micrologix 1400 B Firmware
An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below.
network
low complexity
rockwellautomation CWE-400
7.8
2018-04-05 CVE-2017-12089 Unspecified vulnerability in Rockwellautomation Micrologix 1400 B Firmware
An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before.
network
low complexity
rockwellautomation
7.8
2018-04-05 CVE-2017-12088 Improper Input Validation vulnerability in Rockwellautomation Micrologix 1400 B Firmware
An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below.
network
low complexity
rockwellautomation CWE-20
7.8