CVE Vulnerabilities

CVE-2016-9334

Published: Feb 13, 2017 | Modified: Mar 16, 2017
CVSS 3.x
7.3
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. User credentials are sent to the web server in clear text, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.

Affected Software

Name Vendor Start Version End Version
1763-l16awa_series_a Rockwellautomation * 14.000 (including)
1763-l16awa_series_b Rockwellautomation * 14.000 (including)
1763-l16bbb_series_a Rockwellautomation * 14.000 (including)
1763-l16bbb_series_b Rockwellautomation * 14.000 (including)
1763-l16bwa_series_a Rockwellautomation * 14.000 (including)
1763-l16bwa_series_b Rockwellautomation * 14.000 (including)
1763-l16dwd_series_a Rockwellautomation * 14.000 (including)
1763-l16dwd_series_b Rockwellautomation * 14.000 (including)
1766-l32awa_series_a Rockwellautomation * 15.004 (including)
1766-l32awa_series_b Rockwellautomation * 15.004 (including)
1766-l32awaa_series_a Rockwellautomation * 15.004 (including)
1766-l32awaa_series_b Rockwellautomation * 15.004 (including)
1766-l32bwa_series_a Rockwellautomation * 15.004 (including)
1766-l32bwa_series_b Rockwellautomation * 15.004 (including)
1766-l32bwaa_series_a Rockwellautomation * 15.004 (including)
1766-l32bwaa_series_b Rockwellautomation * 15.004 (including)
1766-l32bxb_series_a Rockwellautomation * 15.004 (including)
1766-l32bxb_series_b Rockwellautomation * 15.004 (including)
1766-l32bxba_series_a Rockwellautomation * 15.004 (including)
1766-l32bxba_series_b Rockwellautomation * 15.004 (including)

References