En bref
- CVE-2016-9338 est une vulnérabilité FAIBLE (CVSS 2.7) touchant 1763-l16awa series a (rockwellautomation), 1763-l16awa series b (rockwellautomation), 1763-l16bbb series a (rockwellautomation).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.4%, plus élevée que 84.4% des vulnérabilités.
- Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.
Description
An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. Because of an Incorrect Permission Assignment for Critical Resource, users with administrator privileges may be able to remove all administrative users requiring a factory reset to restore ancillary web server function. Exploitation of this vulnerability will still allow the affected device to function in its capacity as a controller.
Autres vulnérabilités de 1763-l16awa series a
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free