Lucene search

K
cveIcscertCVE-2015-6491
HistoryOct 28, 2015 - 10:59 a.m.

CVE-2015-6491

2015-10-2810:59:13
icscert
web.nvd.nist.gov
41
allen-bradley
micrologix
remote authentication
arbitrary file insertion
security vulnerability
nvd
cve-2015-6491

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

27.4%

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors.

Affected configurations

Nvd
Node
rockwellautomationmicrologix_1100_firmwareRange14.000
OR
rockwellautomationmicrologix_1400_firmwareRange15.002
VendorProductVersionCPE
rockwellautomationmicrologix_1100_firmware*cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:*:*:*:*:*:*:*:*
rockwellautomationmicrologix_1400_firmware*cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:*:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

27.4%

Related for CVE-2015-6491