CVE-2017-12088

CVE-2017-12088 — Rockwell/MicroLogix 1400 Series (FRN ≤ 21.2) Affected product: Allen-Bradley MicroLogix 1400 Series B controllers with Ethernet. Vulnerability: Improper authentication leads to an exploitable denial of service via specially crafted Ethernet packets that can power cycle the device...

CVE-2017-12090

CVE-2017-12090 affects Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. A specially crafted SNMP-set request, sent without the associated firmware-flashing SNMP-set sequence, can trigger a device power cycle, causing downtime. Exploitation is network-based and can be performed with lo...

CVE-2017-14463

CVE-2017-14463 is an unauthenticated access-control vulnerability in the Allen Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. The issue resides in the data, program, and function file permissions, where a crafted UDP/EtherNet packet can trigger a read or write operation that discloses inf...

CVE-2017-12089

CVE-2017-12089 affects Rockwell/Allen‑Bradley MicroLogix 1400 Series B FRN 21.2 and earlier, via the program download functionality. A remote, unauthenticated attacker can send a crafted packet over the network to trigger a device fault, causing halted operations (denial of service). Connected so...

CVE-2017-14467

CVE-2017-14467 affects Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. The vulnerability is an improper access control that allows an unauthenticated remote attacker to perform live rung edits and potentially modify ladder logic, settings, or trigger faults and CPU state changes via ...

CVE-2017-14462

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-12089

An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a device fault resulting in halted operations. An attacker can send an unauthenticated packet to trigger...

CVE-2017-14471

CVE-2017-14471 concerns an unauthenticated access-control vulnerability in the Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and prior, affecting data, program, and function file permissions. A crafted network packet can trigger read/write operations that disclose sensitive information or modif...

CVE-2017-14470

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14472

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14473

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14463

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14469

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14466

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

PT-2018-5662 · Rockwell Automation · Allen Bradley Micrologix 1400 Series B

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions 21.2 and before Description: The issue allows for unauthorized access and modification of sensitive information due to improper access control in the data, program, and function file permissions...

PT-2018-5657 · Allen Bradley · Allen Bradley Micrologix 1400 Series B

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions 21.2 and before Description: An exploitable access control issue exists in the data, program, and function file permissions functionality. A specially crafted packet can cause a read or write...

PT-2018-5660 · Allen Bradley · Allen Bradley Micrologix 1400 Series B

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions 21.2 and before Description: An issue exists in the data, program, and function file permissions functionality, allowing for access control bypass. A specially crafted packet can cause...

PT-2018-5659 · Allen Bradley · Allen Bradley Micrologix 1400 Series B

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions 21.2 and before Description: An exploitable access control issue exists in the data, program, and function file permissions functionality. A specially crafted packet can cause a read or write...

PT-2018-5346 · Rockwell Automation · Allen Bradley Micrologix 1400 Series B

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B Firmware versions 21.2 and before Description: The issue is related to an insufficient resource pool in the session communication functionality. It can be triggered by a specially crafted stream of...

PT-2018-5658 · Allen Bradley · Micrologix 1400 Series B

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions 21.2 and before Description: An exploitable access control issue exists in the data, program, and function file permissions functionality. A specially crafted packet can cause a read or write...