Vulnerability Description
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HTTP request.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Micrologix 1100 Firmware | <= 14.000 |
| Rockwellautomation | Micrologix 1400 Firmware | <= 15.002 |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-300-03PatchThird Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-300-03PatchThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2015-6492?
CVE-2015-6492 is a vulnerability with a CVSS score of 7.8 (HIGH). Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HT...
How severe is CVE-2015-6492?
CVE-2015-6492 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-6492?
Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation Micrologix 1100 Firmware, Rockwellautomation Micrologix 1400 Firmware.