CVE-2009-0473

Rockwell Automation ControlLogix 1756-ENBT/A - Open Redirect

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-0473. PoCs published by akbarq.

AI-analyzed exploit summary This repository contains a functional Python script that exploits an open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A by crafting a malicious URL to redirect users to an attacker-controlled site. The script uses Python's webbrowser library to open the crafted URL in the default browser.

Description

Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Exploits (1)

nomisec WORKING POC 3 stars
by akbarq · poc
https://github.com/akbarq/CVE-2009-0473-check

This repository contains a functional Python script that exploits an open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A by crafting a malicious URL to redirect users to an attacker-controlled site. The script uses Python's webbrowser library to open the crafted URL in the default browser.

Classification
Working Poc 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Rockwell ControlLogix 1756-ENBT/A
No auth needed
Prerequisites: Python 2.7 · X Windows environment · Access to the target PLC web interface
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (5)

Core 5
Core References
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/619499
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/33636
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33783
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0347

Scores

EPSS 0.1322
EPSS Percentile 95.9%

Details

CWE
CWE-59
Status published
Products (1)
rockwellautomation/controllogix_1756-enbt\/a_ethernet\/_ip_bridge
Published Feb 06, 2009
Tracked Since Feb 18, 2026