Lucene search

[email protected]CVE-2020-6984

HistoryMar 16, 2020 - 4:15 p.m.

CVE-2020-6984

2020-03-1616:15:00

CWE-327

[email protected]

web.nvd.nist.gov

cve-2020-6984

rockwell automation

micrologix 1400

micrologix 1100

rslogix 500

nvd

cryptographic function

password protection

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

9.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.013 Low

EPSS

Percentile

85.9%

JSON

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.

CPENameOperatorVersion
rockwellautomation:micrologix_1400_a_firmwarerockwellautomation micrologix 1400 a firmwareeq*
rockwellautomation:micrologix_1400_b_firmwarerockwellautomation micrologix 1400 b firmwarele21.001
rockwellautomation:micrologix_1100_firmwarerockwellautomation micrologix 1100 firmwareeq*
rockwellautomation:rslogix_500rockwellautomation rslogix 500le12.001

CPE	Name	Operator	Version
rockwellautomation:micrologix_1400_a_firmware	rockwellautomation micrologix 1400 a firmware	eq	*
rockwellautomation:micrologix_1400_b_firmware	rockwellautomation micrologix 1400 b firmware	le	21.001
rockwellautomation:micrologix_1100_firmware	rockwellautomation micrologix 1100 firmware	eq	*
rockwellautomation:rslogix_500	rockwellautomation rslogix 500	le	12.001

References

www.us-cert.gov/ics/advisories/icsa-20-070-06

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

9.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.013 Low

EPSS

Percentile

85.9%

JSON

Related for CVE-2020-6984

prion1 nessus2 cvelist1 ics1 threatpost2