CVE-2015-6492

2015-10-2810:59:14

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

59.9%

JSON

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HTTP request.

Affected configurations

Nvd

Node

rockwellautomationmicrologix_1100_firmwareRange≤14.000

rockwellautomationmicrologix_1400_firmwareRange≤15.002

VendorProductVersionCPE
rockwellautomationmicrologix_1100_firmware*cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:*:*:*:*:*:*:*:*
rockwellautomationmicrologix_1400_firmware*cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rockwellautomation	micrologix_1100_firmware	*	cpe:2.3:o:rockwellautomation:micrologix_1100_firmware::::::::
rockwellautomation	micrologix_1400_firmware	*	cpe:2.3:o:rockwellautomation:micrologix_1400_firmware::::::::