MicroLogix 1100 and 1400 Controllers Multiple Vulnerabilities

Bugtraq ID:	37827
Class:	Design Error
CVE:	CVE-2009-3739
Remote:	Yes
Local:	No
Published:	Jan 15 2010 12:00AM
Updated:	Jan 20 2010 03:11PM
Credit:	Eyal Udassin
Vulnerable:	Rockwell Automation Micrologix 1400 0 Rockwell Automation Micrologix 1100 0
Not Vulnerable:

MicroLogix 1100 and 1400 Controllers Multiple Vulnerabilities

MicroLogix 1100 and 1400 Controllers are prone to multiple vulnerabilities.

Attackers may exploit these issues to gain unauthorized access to the programmable logic controller (PLC). Successful exploits will allow attackers to compromise affected devices. Other attacks are also possible.

MicroLogix 1100 and 1400 Controllers Multiple Vulnerabilities

An attacker can carry out these attacks with widely available tools and utilities.

MicroLogix 1100 and 1400 Controllers Multiple Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MicroLogix 1100 and 1400 Controllers Multiple Vulnerabilities

References:

• MicroLogix Homepage (Rockwell Automation)
  
• C4 SCADA Security Advisory - Rockwell Automation (Allen Bradley) Multiple Vulner ('Eyal Udassiln' )
  
• Vulnerability Note VU#144233 (US-CERT)