PoC Index85,101 CVEs with PoCs

CVE-2020-6084

HIGH 7.5EPSS 4.3%

An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability by sending an Electronic Key Segment with less bytes than required by the Key Format Table.

Affected
Allen-Bradley
CVSS v3.1 NVD
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v3.0 CISCO
7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 NVD
7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
4.26% chance of exploitation in the next 30 days, 91st percentile
Published
2020-10-19
Updated
2024-08-04

Proof-of-concept exploits (1)

References