Vulnerability Details CVE-2009-0473
Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.2%
CVSS Severity
CVSS v2 Score 6.8
References
- http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729
- http://secunia.com/advisories/33783
- http://www.kb.cert.org/vuls/id/619499
- http://www.securityfocus.com/bid/33636
- http://www.vupen.com/english/advisories/2009/0347
- http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729
- http://secunia.com/advisories/33783
- http://www.kb.cert.org/vuls/id/619499
- http://www.securityfocus.com/bid/33636
- http://www.vupen.com/english/advisories/2009/0347
Products affected by CVE-2009-0473
-
cpe:2.3:a:rockwellautomation:controllogix_1756-enbt/a_ethernet/_ip_bridge:-