CVE-2018-17924

🗓️ 07 Dec 2018 14:00:00Reported by icscertType

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules are vulnerable to unauthenticated remote threat actors sending unauthorized IP configurations, causing loss of communication in the system

Reporter	Title	Published	Views	Family All 12
Tenable Nessus	Rockwell Automation/Allen-Bradley Multiple Devices Authentication Bypass (ICSA-18-310-02)	8 May 201900:00	–	nessus
Tenable Nessus	Rockwellautomation Micrologix Missing Authentication for Critical Function	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules Missing Authentication For Critical Function (CVE-2018-17924)	7 Feb 202200:00	–	nessus
Circl	CVE-2018-17924	10 Dec 201811:56	–	circl
CNVD	Denial of Service Vulnerability in Multiple Rockwell Automation Products	13 Dec 201800:00	–	cnvd
Check Point Advisories	Rockwell Automation MicroLogix 1400 and 1756 ControlLogix Denial of Service (CVE-2018-17924)	25 Feb 201900:00	–	checkpoint_advisories
Cvelist	CVE-2018-17924	7 Dec 201814:00	–	cvelist
EUVD	EUVD-2018-9665	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules	6 Nov 201800:00	–	ics
NVD	CVE-2018-17924	7 Dec 201814:29	–	nvd

NVD

Vulners

Node

rockwellautomation micrologix_1400_firmwareMatch-

AND

rockwellautomation micrologix_1400Match-

Node

rockwellautomation 1756-enbt_firmwareMatch-

AND

rockwellautomation 1756-enbtMatch-

Node

rockwellautomation 1756-eweb_series_a_firmwareMatch-

AND

rockwellautomation 1756-eweb_series_aMatch-

Node

rockwellautomation 1756-eweb_series_b_firmwareMatch-

AND

rockwellautomation 1756-eweb_series_bMatch-

Node

rockwellautomation 1756-en2f_series_a_firmwareMatch-

AND

rockwellautomation 1756-en2f_series_aMatch-

Node

rockwellautomation 1756-en2f_series_b_firmwareMatch-

AND

rockwellautomation 1756-en2f_series_bMatch-

Node

rockwellautomation 1756-en2f_series_c_firmwareRange≤10.10

AND

rockwellautomation 1756-en2f_series_cMatch-

Node

rockwellautomation 1756-en2t_series_a_firmwareMatch-

AND

rockwellautomation 1756-en2t_series_aMatch-

Node

rockwellautomation 1756-en2t_series_b_firmwareMatch-

AND

rockwellautomation 1756-en2t_series_bMatch-

Node

rockwellautomation 1756-en2t_series_c_firmwareMatch-

AND

rockwellautomation 1756-en2t_series_cMatch-

Node

rockwellautomation 1756-en2t_series_d_firmwareRange≤10.10

AND

rockwellautomation 1756-en2t_series_dMatch-

Node

rockwellautomation 1756-en2tr_series_a_firmwareMatch-

AND

rockwellautomation 1756-en2tr_series_aMatch-

Node

rockwellautomation 1756-en2tr_series_b_firmwareMatch-

AND

rockwellautomation 1756-en2tr_series_bMatch-

Node

rockwellautomation 1756-en2tr_series_c_firmwareRange≤10.10

AND

rockwellautomation 1756-en2tr_series_cMatch-

Node

rockwellautomation 1756-en3tr_series_a_firmwareMatch-

AND

rockwellautomation 1756-en3tr_series_aMatch-

Node

rockwellautomation 1756-en3tr_series_b_firmwareRange≤10.10

AND

rockwellautomation 1756-en3tr_series_bMatch-

[
  {
    "product": "Rockwell Automation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "MicroLogix 1400 Controllers Series A, all versions, Series B, v21.003 and earlier,Series C, v21.003 and earlier, 1756 ControlLogix EtherNet/IP Communications Modules 1756-ENBT, all versions, 1756-EWEB Series A, all versions Series B, all versions, 1756-EN2F Series A, all versions, Series B, all versions, Series C, v10.10 and earlier, 1756-EN2T, Series A, all versions, Series B, all versions, Series C, all versions, Series D, v10.10 and earlier, 1756-EN2TR, Series A, all versions, Series B, all versions, Series C, v10.10 and earlier, 1756-EN3TR, Series A, all versions, Series B, v10.10 and earlier."
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-310-02
securityfocus	www.securityfocus.com/bid/106132

03 Jun 2026 14:16Current

8.5High risk

Vulners AI Score8.5

CVSS 27.8

CVSS 3.17.5 - 8.6

EPSS0.00087

SSVC

CWE-306