CVE-2015-6491

Name of the Vulnerable Software and Affected Versions Allen-Bradley MicroLogix 1100 versions before B FRN 15.000 Allen-Bradley MicroLogix 1400 versions before B FRN 15.003

Description The issue is related to a lack of restrictions on file uploads in the programmable logic controllers MicroLogix 1100 and 1400. This allows a remote authenticated user to insert the content of an arbitrary file into a FRAME element.

Recommendations For Allen-Bradley MicroLogix 1100 versions before B FRN 15.000, update to version B FRN 15.000 or later. For Allen-Bradley MicroLogix 1400 versions before B FRN 15.003, update to version B FRN 15.003 or later.