Rockwell Automation Flex I/O 1794-AENT/B
Approved changes feed: RSS · Atom
cpe:2.3:h:rockwellautomation:flex_i\/o_1794-aent\/b:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Rockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba) |
|---|---|
| Product | Flex I/O 1794 Aent/B (9206ef63-761b-58c3-a456-170ee4747ba0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-6087 |
not_vulnerable | 2026-06-08 05:26:44.517594 |
Details available
HIGH (7.5)
An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability If the ANSI Extended Symbol Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data, the device enters a fault state where communication with the device is lost and a physical power cycle is required.
Published: 2020-10-14T12:35:08.000Z
Updated: 2024-08-04T08:47:41.100Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6086 |
not_vulnerable | 2026-06-08 05:26:44.516803 |
Details available
HIGH (7.5)
An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.If the Simple Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data, the device enters a fault state where communication with the device is lost and a physical power cycle is required.
Published: 2020-10-14T12:34:58.000Z
Updated: 2024-08-04T08:47:41.005Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.