Critical ICSA-20-070-06 4 CVEs

Rockwell Automation MicroLogix Controllers and RSLogix 500 Software

Published Mar 10, 2020 · Updated Mar 10, 2020

Vendor: Rockwell Automation Product: MicroLogix 1100 Controller Product: RSLogix 500 Software Product: Series A Product: Series B

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain access to sensitive project file information including passwords.

Vulnerabilities 4

Critical 9.8

CVE-2020-6984

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Con…

Mar 16, 2020
Critical 9.8

CVE-2020-6990

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Con…

Mar 16, 2020
High 7.5

CVE-2020-6988

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Con…

Mar 16, 2020
Unscored —

CVE-2020-6980

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Con…

Mar 16, 2020

Revision history

2020-03-10 #1
ICSA-20-070-06 Rockwell Automation MicroLogix Controllers and RSLogix 500 Software

References

ICS Advisory ICSA-20-070-06 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-070-06
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B