Lucene search

[email protected]CVE-2017-12090

HistoryApr 05, 2018 - 9:29 p.m.

CVE-2017-12090

2018-04-0521:29:00

CWE-400

[email protected]

web.nvd.nist.gov

cve-2017-12090

denial of service

allen bradley micrologix 1400

snmp

vulnerability

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

JSON

An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a device power cycle resulting in downtime for the device. An attacker can send one packet to trigger this vulnerability.

Affected configurations

Vulners

NVD

Node

talosallen_bradleyRange≤Allen Bradley Micrologix 1400 Series B FRN 21.2

talosallen_bradleyRange≤Allen Bradley Micrologix 1400 Series B FRN 21.0

talosallen_bradleyRange≤Allen Bradley Micrologix 1400 Series B FRN 15

CPENameOperatorVersion
rockwellautomation:micrologix_1400_b_firmwarerockwellautomation micrologix 1400 b firmwarele21.2

CPE	Name	Operator	Version
rockwellautomation:micrologix_1400_b_firmware	rockwellautomation micrologix 1400 b firmware	le	21.2

CNA Affected

[
  {
    "product": "Allen Bradley",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "Allen Bradley Micrologix 1400 Series B FRN 21.2, Allen Bradley Micrologix 1400 Series B FRN 21.0, Allen Bradley Micrologix 1400 Series B FRN 15"
      }
    ]
  }
]