CVE-2017-12093

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to...

CVE-2017-14466

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-12088

An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted packet can cause a device power cycle resulting in a fault state and deletion of ladder logic. An attacker can send one...

CVE-2017-12093

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to...

CVE-2017-14469

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

Denial of service

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to...

Improper access control

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

Denial of service

An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a device power cycle...

CVE-2017-14471

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-12088

CVE-2017-12088 — Rockwell/MicroLogix 1400 Series (FRN ≤ 21.2) Affected product: Allen-Bradley MicroLogix 1400 Series B controllers with Ethernet. Vulnerability: Improper authentication leads to an exploitable denial of service via specially crafted Ethernet packets that can power cycle the device...

CVE-2017-14471

CVE-2017-14471 concerns an unauthenticated access-control vulnerability in the Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and prior, affecting data, program, and function file permissions. A crafted network packet can trigger read/write operations that disclose sensitive information or modif...

CVE-2017-14463

CVE-2017-14463 is an unauthenticated access-control vulnerability in the Allen Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. The issue resides in the data, program, and function file permissions, where a crafted UDP/EtherNet packet can trigger a read or write operation that discloses inf...

CVE-2017-14464

The CVE-2017-14464 entry concerns an unauthenticated access-control vulnerability in Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. The data, program, and function file permissions allow a specially crafted packet to trigger read/write operations that disclose sensitive information,...

CVE-2017-14467

CVE-2017-14467 affects Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. The vulnerability is an improper access control that allows an unauthenticated remote attacker to perform live rung edits and potentially modify ladder logic, settings, or trigger faults and CPU state changes via ...

CVE-2017-14472

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14472

CVE-2017-14472 affects Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier. An unauthenticated attacker can exploit improper access control in the data, program, and function file permissions to read the master password and potentially modify ladder logic or settings via crafted network p...

CVE-2017-14466

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14470

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-12090

CVE-2017-12090 affects Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. A specially crafted SNMP-set request, sent without the associated firmware-flashing SNMP-set sequence, can trigger a device power cycle, causing downtime. Exploitation is network-based and can be performed with lo...

CVE-2017-14465

CVE-2017-14465 affects Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier. Affected component: data, program, and function file permissions; root cause is improper access control allowing unauthenticated packets to modify or read PLC data and force inputs/outputs, potentially altering la...