Critical ICSA-17-115-04 5 CVEs

Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400

Published Apr 25, 2017 · Updated May 23, 2017 · Revision 2

Vendor: Rockwell Automation Product: 1763-L16AWA Series A and B Product: 1763-L16BBB Series A and B Product: 1763-L16BWA Series A and B Product: 1763-L16DWD Series A and B Product: 1766-L32AWA Series A and B Product: 1766-L32AWAA Series A and B Product: 1766-L32BWA Series A and B Product: 1766-L32BWAA Series A and B Product: 1766-L32BXB Series A and B Product: 1766-L32BXBA Series A and B

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 5

Critical 9.8

CVE-2017-7898

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley …

Jun 30, 2017
Critical 9.8

CVE-2017-7903

A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-log…

Jun 30, 2017
Unscored —

CVE-2017-7899

An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic co…

Jun 30, 2017
Unscored —

CVE-2017-7901

A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 110…

Jun 30, 2017
Unscored —

CVE-2017-7902

A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 p…

Jun 30, 2017

Revision history

2017-05-23 #2
ICSA-17-115-04 Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 (Update A)
2017-04-25 #1
ICSA-17-115-04P Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400

References

ICS Advisory ICSA-17-115-04 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-115-04
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-115-04