CVE-2021-22659

2021-03-2515:59:07

CWE-120

icscert

www.cve.org

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.7%

JSON

Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a denial-of-service condition. The FAULT LED will flash RED and communications may be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user.

CNA Affected

[
  {
    "product": "Rockwell Automation MicroLogix 1400",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "MicroLogix 1400, All series Version 21.6 and below"
      }
    ]
  }
]