description: The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings.
problem types: CWE-284 Improper Access Control
affected:
{
product: 1734-AENTR
vendor: Rockwell Automation
versions:
status: affected, version: Series B 4.001 to 4.005, and 5.011 to 5.017
status: affected, version: Series C 6.011 and 6.012
}