CVE-2009-0474

The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-02-06

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Controllogix 1756-enbt/a Ethernet/ Ip Bridge (Rockwellautomation)

References

• http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729
• http://secunia.com/advisories/33783
• http://www.kb.cert.org/vuls/id/124059
• http://www.kb.cert.org/vuls/id/RGII-7MWKZ3
• http://www.vupen.com/english/advisories/2009/0347