Description
The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | 1734-AENTR | Series B 4.001 to 4.005, and 5.011 to 5.017, Series C 6.011 and 6.012 | — |
Advisories 1
- ICSA-21-063-01 Rockwell Automation 1734-AENTR Series B and Series C CISA ICS & IT advisories · Mar 4, 2021