Lucene search

[email protected]CVE-2017-12093

HistoryApr 05, 2018 - 9:29 p.m.

CVE-2017-12093

2018-04-0521:29:00

CWE-400

[email protected]

web.nvd.nist.gov

cve-2017-12093

allen bradley

micrologix 1400

firmware

insufficient resource pool

vulnerability

session communication

plc

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.5%

JSON

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to the PLC being disconnected. An attacker can send unauthenticated packets to trigger this vulnerability.

Affected configurations

Vulners

NVD

Node

talosallen_bradleyRange≤Allen Bradley Micrologix 1400 Series B FRN 21.2

talosallen_bradleyRange≤Allen Bradley Micrologix 1400 Series B FRN 21.0

talosallen_bradleyRange≤Allen Bradley Micrologix 1400 Series B FRN 15

CPENameOperatorVersion
rockwellautomation:micrologix_1400_b_firmwarerockwellautomation micrologix 1400 b firmwarele21.2

CPE	Name	Operator	Version
rockwellautomation:micrologix_1400_b_firmware	rockwellautomation micrologix 1400 b firmware	le	21.2

CNA Affected

[
  {
    "product": "Allen Bradley",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "Allen Bradley Micrologix 1400 Series B FRN 21.2, Allen Bradley Micrologix 1400 Series B FRN 21.0, Allen Bradley Micrologix 1400 Series B FRN 15"
      }
    ]
  }
]