High ICSA-21-063-01 2 CVEs

Rockwell Automation 1734-AENTR Series B and Series C

Published Mar 4, 2021 · Updated Mar 4, 2021

Vendor: Rockwell Automation Product: Series B Product: Series C

Summary

Successful exploitation of these vulnerabilities could lead to unauthorized data modification on the affected devices.

Vulnerabilities 2

Medium 6.1

CVE-2020-14502

The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacke…

Rockwell Automation 1734-AENTR ICS / OT

Feb 24, 2022
Medium 5.3

CVE-2020-14504

The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, un…

Rockwell Automation 1734-AENTR ICS / OT

Feb 24, 2022

Revision history

2021-03-04 #1
ICSA-21-063-01 Rockwell Automation 1734-AENTR Series B and Series C

References

ICS Advisory ICSA-21-063-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-063-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B
Recommended Practices
https://us-cert.cisa.gov/ncas/tips/ST04-014