Lucene search

[email protected]CVE-2017-12089

HistoryApr 05, 2018 - 9:29 p.m.

CVE-2017-12089

2018-04-0521:29:00

[email protected]

web.nvd.nist.gov

cve-2017-12089

allen bradley

micrologix 1400

dos

denial of service

vulnerability

nvd

device fault

unauthenticated packet

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

30.4%

JSON

An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a device fault resulting in halted operations. An attacker can send an unauthenticated packet to trigger this vulnerability.

Affected configurations

Vulners

NVD

Node

talosallen_bradleyRange≤Allen Bradley Micrologix 1400 Series B FRN 21.2

talosallen_bradleyRange≤Allen Bradley Micrologix 1400 Series B FRN 21.0

talosallen_bradleyRange≤Allen Bradley Micrologix 1400 Series B FRN 15

CPENameOperatorVersion
rockwellautomation:micrologix_1400_b_firmwarerockwellautomation micrologix 1400 b firmwarele21.2

CPE	Name	Operator	Version
rockwellautomation:micrologix_1400_b_firmware	rockwellautomation micrologix 1400 b firmware	le	21.2

CNA Affected

[
  {
    "product": "Allen Bradley",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "Allen Bradley Micrologix 1400 Series B FRN 21.2, Allen Bradley Micrologix 1400 Series B FRN 21.0, Allen Bradley Micrologix 1400 Series B FRN 15"
      }
    ]
  }
]