CVE-2017-14465

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-12090

An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a device power cycle...

Improper access control

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-12088

An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted packet can cause a device power cycle resulting in a fault state and deletion of ladder logic. An attacker can send one...

CVE-2017-14464

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

Improper access control

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14467

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

Improper access control

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14473

CVE-2017-14473 is an Unauthenticated Data/Program/Function File Improper Access Control vulnerability affecting Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier (tested up to FRN 21.2, 21.0 and 15). The TALOS advisory (TALOS-2017-0443) describes that an unauthenticated attacker can rea...

CVE-2017-14468

CVE-2017-14468 is an improper access control vulnerability affecting the Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. The flaw resides in the data, program, and function file permissions, allowing unauthenticated packets to trigger reads/writes that disclose sensitive information,...

CVE-2017-14470

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14464

The CVE-2017-14464 entry concerns an unauthenticated access-control vulnerability in Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. The data, program, and function file permissions allow a specially crafted packet to trigger read/write operations that disclose sensitive information,...

CVE-2017-12090

CVE-2017-12090 affects Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. A specially crafted SNMP-set request, sent without the associated firmware-flashing SNMP-set sequence, can trigger a device power cycle, causing downtime. Exploitation is network-based and can be performed with lo...

CVE-2017-12093

CVE-2017-12093 affects Rockwell/Allen‑Bradley MicroLogix 1400 Series B controllers (firmware 21.2 and earlier). A specially crafted stream of unauthenticated packets can exhaust the session resource pool, causing legitimate PLC connections to be disconnected. The vulnerability is rooted in the se...

CVE-2017-14469

CVE-2017-14469 affects Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. It is an unauthenticated, network-access vulnerability in data, program, and function file permissions that allows reading/writing operations leading to disclosure of information, modification of settings, or ladd...

CVE-2017-14473

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14472

CVE-2017-14472 affects Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier. An unauthenticated attacker can exploit improper access control in the data, program, and function file permissions to read the master password and potentially modify ladder logic or settings via crafted network p...

CVE-2017-14462

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14463

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14469

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...