CVE-2018-17924 PoC — 多款Rockwell Automation产品安全漏洞

Source

https://github.com/g0dd0ghd/CVE-2018-17924-PoC

Associated Vulnerability

Title:多款Rockwell Automation产品安全漏洞 (CVE-2018-17924)
Description:Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller in the system is set to Hard RUN mode. When the affected device accepts this new IP configuration, a loss of communication occurs between the device and the rest of the system as the system traffic is still attempting to communicate with the device via the overwritten IP address.

Description

My team research about CVE-2018-17924 of Rockwell Automation Micrologix 1400

Readme

# CVE-2018-17924
My team research about CVE-2018-17924 of Rockwell Automation Micrologix 1400. This research occured when I participated in OPSWAT fellowship program in 10/2023.
### Blog
https://www.opswat.com/blog/strengthening-ot-security-against-cve-2018-17924-with-metadefender-ot-solutions

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!