CVE-2017-12092

🗓️ 04 Jun 2018 20:00:29Reported by talosType

An exploitable file write vulnerability in Allen Bradley Micrologix 1400 Series B FRN 21.2 and before

Reporter	Title	Published	Views	Family All 9
NVD	CVE-2017-12092	4 Jun 201820:29	–	nvd
Cvelist	CVE-2017-12092	4 Jun 201820:00	–	cvelist
Prion	Privilege escalation	4 Jun 201820:29	–	prion
Tenable Nessus	Rockwellautomation Micrologix Exposure of Sensitive Information to an Unauthorized Actor	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwell Automation MicroLogix Improper Authentication (CVE-2017-12092)	7 Feb 202200:00	–	nessus
Talos	Allen Bradley Micrologix 1400 Series B Memory Module Store Program File Write Vulnerability	28 Mar 201800:00	–	talos
ICS	Rockwell Automation MicroLogix	17 Sep 201812:00	–	ics
Check Point Advisories	Rockwell Automation Allen Bradley Micrologix 1400 Series Device Power Cycle Denial of Service (CVE-2017-12088; CVE-2017-12089; CVE-2017-12090; CVE-2017-12092; CVE-2017-12093)	9 Jan 201900:00	–	checkpoint_advisories
Talos Blog	Vulnerability Spotlight: Multiple Vulnerabilities in Allen Bradley MicroLogix 1400 Series Devices	28 Mar 201812:59	–	talosblog

Nvd

Vulners

Node

rockwellautomation micrologix_1400_b_firmwareRange≤21.2

AND

rockwellautomation micrologix_1400Match-

[
  {
    "product": "Allen Bradley",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "Allen Bradley Micrologix 1400 Series B FRN 21.2 Allen Bradley Micrologix 1400 Series B FRN 21.0 Allen Bradley Micrologix 1400 Series B FRN 15"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2017-0444

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jun 2018 20:29Current

7.4High risk

Vulners AI Score7.4

CVSS25

CVSS33.7 - 7.5

EPSS0.00118

CWE-200