Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2020-6111

Quick assessment

Affected
n/a Allen-Bradley
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Allen Bradley Micrologix 1100是荷兰Allen Bradley公司的一款用于工业环境的可编程控制器。该设备之支持以太网连接访问,监视和编程支持在线编辑、提供嵌入式Web服务器来支持通过网页控制设备,同时支持可以通过嵌入式LCD屏幕监视和修改控制器数据。 Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series 存在安全漏洞,该漏洞源于特别制作的数据包可能会导致重大错误,从而导致拒绝服务。

AI Predicted 5.3 Difficulty: Trivial EPSS 5.56% · P93

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-6111

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series B FRN 15.000, Series B FRN 14.000, Series B FRN 13.000, Series B FRN 12.000, Series B FRN 11.000 and Series B FRN 10.000. A specially crafted packet can cause a major error, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
数值错误
Source: CVE Program / CVE List V5
Vulnerability Title
Allen Bradley Micrologix 1100 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Allen Bradley Micrologix 1100是荷兰Allen Bradley公司的一款用于工业环境的可编程控制器。该设备之支持以太网连接访问,监视和编程支持在线编辑、提供嵌入式Web服务器来支持通过网页控制设备,同时支持可以通过嵌入式LCD屏幕监视和修改控制器数据。 Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series 存在安全漏洞,该漏洞源于特别制作的数据包可能会导致重大错误,从而导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- Allen-Bradley Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 10.000, Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 11.000, Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B -

II. Public POCs for CVE-2020-6111

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-6111

请登录查看更多情报信息。

Vendor Advisories for CVE-2020-6111 (1)

Same Patch Batch · n/a · 2020-12-03 · 40 CVEs total

CVE-2020-6021 Check Point Endpoint Security Client 代码问题漏洞
CVE-2020-13542 LogicalDoc 安全漏洞
CVE-2020-13531 Pixar OpenUSD 资源管理错误漏洞
CVE-2020-14381 linux kernel 资源管理错误漏洞
CVE-2020-28923 Play Framework 安全漏洞
CVE-2020-25649 Fasterxml Jackson 代码问题漏洞
CVE-2020-28939 OpenClinic 代码问题漏洞
CVE-2020-28938 OpenClinic 跨站脚本漏洞
CVE-2020-28937 OpenClinic GA 授权问题漏洞
CVE-2020-6017 Valvesoftware GameNetworkingSockets 缓冲区错误漏洞
CVE-2020-13543 WebKitGTK 资源管理错误漏洞
CVE-2020-14318 Samba 安全漏洞
CVE-2020-14339 Red Hat libvirt 安全漏洞
CVE-2020-25711 Red Hat Infinispan 访问控制错误漏洞
CVE-2020-27759 ImageMagick Studio ImageMagick 输入验证错误漏洞
CVE-2020-27760 ImageMagick Studio ImageMagick 数字错误漏洞
CVE-2020-27761 ImageMagick Studio ImageMagick 输入验证错误漏洞
CVE-2020-27762 ImageMagick Studio ImageMagick 输入验证错误漏洞
CVE-2020-27763 ImageMagick Studio ImageMagick 数字错误漏洞
CVE-2020-27764 ImageMagick Studio ImageMagick 输入验证错误漏洞

Showing top 20 of 40 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-6111

No comments yet


Leave a comment