Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400

🗓️ 25 Apr 2017 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 54 Views

Allen-Bradley MicroLogix 1100 and 1400 have remotely exploitable vulnerabilities with predictable value range, encryption flaws, and weak password requirements

Reporter	Title	Published	Views	Family All 56
Tenable Nessus	Rockwell Automation/Allen-Bradley MicroLogix Controllers <= 16.00 Improper Restriction of Excessive Authentication Attempts	8 May 201900:00	–	nessus
Tenable Nessus	Rockwell Automation/Allen-Bradley MicroLogix Controllers <= 16.00 Information Exposure	8 May 201900:00	–	nessus
Tenable Nessus	Rockwell Automation/Allen-Bradley MicroLogix Controllers <= 16.00 Predictable Value Range	8 May 201900:00	–	nessus
Tenable Nessus	Rockwell Automation/Allen-Bradley MicroLogix Controllers <= 16.00 Nonce Key Pair Reuse	8 May 201900:00	–	nessus
Tenable Nessus	Rockwell Automation/Allen-Bradley MicroLogix Controllers <= 16.00 Week Password Requirements	8 May 201900:00	–	nessus
Tenable Nessus	Rockwell Automation MicroLogix 1100 and 1400 <= 16.0 Improper Information Handling (ICSA-17-115-04)	11 Sep 201900:00	–	nessus
Tenable Nessus	Rockwellautomation 1763-l16awa Use of Insufficiently Random Values	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwellautomation 1763-l16awa Exposure of Sensitive Information to an Unauthorized Actor	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwellautomation 1763-l16awa Inadequate Encryption Strength	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwellautomation 1763-l16awa Use of Insufficiently Random Values	8 Nov 201900:00	–	nessus

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-115-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-17-115-04
cisa	www.cisa.gov/news-events/ics-advisories/icsa-17-115-04

25 Apr 2017 00:00Current

10High risk

Vulners AI Score10

CVSS 29

CVSS 39.8

CVSS 3.19.8

EPSS0.03537

SSVC