CVE-2024-6242 : ROCKWELL AUTOMATION CONTROLLOGIX 5580 1756-L8Z TRUSTED SLOT UNPROTECTED ALTERNATE CHANNEL

Description

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1682.html

For More Information

CVERecord

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2024-8523 : LMXCMS UP TO 1.4 SQL COMMAND EXECUTION MODULE ADMIN.PHP FORMATDATA DATA CODE INJECTION

CVE-2024-8523 : LMXCMS UP TO 1.4 SQL COMMAND EXECUTION MODULE ADMIN.PHP FORMATDATA DATA CODE INJECTION

Description A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the

CVE-2024-25584 : OPEN-XCHANGE OX DOVECOT PRO UP TO 2.3.21 DATA COMMAND DATA AUTHENTICITY

CVE-2024-25584 : OPEN-XCHANGE OX DOVECOT PRO UP TO 2.3.21 DATA COMMAND DATA AUTHENTICITY

Description Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be

CVE-2024-8521 : WAVELOG UP TO 1.8.0 LIVE QSO /QSO INDEX MANUAL CROSS SITE SCRIPTING

CVE-2024-8521 : WAVELOG UP TO 1.8.0 LIVE QSO /QSO INDEX MANUAL CROSS SITE SCRIPTING

Description A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index