Rockwellautomation Controllogix 1756-Enbt/a Ethernet/ IP Bridge vulnerabilities

3 CVEs affecting Rockwellautomation Controllogix 1756-Enbt/a Ethernet/ IP Bridge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0474, published 2009-02-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0473, published 2009-02-06. Medium severity, CVSS 6.8. EPSS: 13.2% chance of exploitation in the next 30 days. Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and…
CVE-2009-0474, published 2009-02-06. Medium severity, CVSS 5.0. EPSS: 5.9% chance of exploitation in the next 30 days. The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the…
CVE-2009-0472, published 2009-02-06. Medium severity, CVSS 4.3. EPSS: 2.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allow remote attackers to inject arbitrary web…