17
Product
1756-eweb
by Rockwellautomation · last CVE Jan 24, 2013
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch

Add 1756-eweb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2012-6437
9.8
8%
Jan 24
The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or…
Affected: All versions, or not specified
CVE-2012-6438
7.5
27%
Jan 24
The device does not properly validate the data being sent to the buffer
Affected: All versions, or not specified
CVE-2012-6436
7.5
27%
Jan 24
The device does not properly validate the data being sent to the buffer
Affected: All versions, or not specified
CVE-2012-6435
7.5
33%
Jan 24
When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs…
Affected: All versions, or not specified
CVE-2012-6440
4.8
9%
Jan 24
The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack
Affected: All versions, or not specified
CVE-2012-6441
–
57%
Jan 24
An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port…
Affected: All versions, or not specified
CVE-2012-6439
–
23%
Jan 24
When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes…
Affected: All versions, or not specified
Showing 7