CVE-2009-0474
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module...
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603.
Exploit likelihood
What each source reports
NVD Score used
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603.
- Record
CVE-2009-0474- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603.
- Record
CVE-2009-0474- Updated
- 2026-11-02
EUVDEUVD-2009-0478 No score
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603.
- Record
EUVD-2009-0478- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7g5q-cmj3-796v No score
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module...
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603.
- Record
GHSA-7g5q-cmj3-796v- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0474 is a medium vulnerability (CVSS 5.0) in Rockwellautomation Controllogix 1756-enbt\/a Ethernet\/ Ip Bridge, published February 6, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.93%, the 93rd percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/124059
rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729
secunia.com/advisories/33783
vupen.com/english/advisories/2009/0347
nvd.nist.gov/vuln/detail/CVE-2009-0474
github.com/advisories/GHSA-7g5q-cmj3-796v