Evgeny Druzhinin

The issue is related to the use of a hard-coded cryptographic key in the RSLogix 500 binary file, which could allow an attacker to identify the key and use it for further cryptographic attacks. This could ultimately lead to a remote attacker gaining unauthorized access to the controller. The vulnerability may allow a remote attacker to elevate their privileges.

The issue is related to security mechanism deficiencies in the integrated web server of the MGE SNMP/Web Card Transverse module. This could allow a remote attacker to obtain sensitive device information if network access is obtained. The integrated web server, which uses Port 80/443/TCP, is the vulnerable component.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML.