Rockwell Automation MicroLogix

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low skill level to exploit. Vendor : Rockwell Equipment : MicroLogix Controller Vulnerabilities : Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause denial of service,...

CVE-2017-12092

An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated...

CVE-2017-12092

The CVE-2017-12092 vulnerability affects Allen‑Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. A remote, unauthenticated attacker can send a specially crafted packet that triggers a file write to the memory module, causing a new program to be written to memory. Mitigation: upgrade to FRN 2...