Skip to content
OpenAdvisories
Medium · 5.3 CVE-2017-12093 EUVD-2017-3679GHSA-6xvm-9875-gvqp

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 …

Published Apr 5, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to the PLC being disconnected. An attacker can send unauthenticated packets to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Talos Allen Bradley Allen Bradley Micrologix 1400 Series B FRN 21.2, Allen Bradley Micrologix 1400 Series B FRN 21.0, Allen Bradley Micrologix 1400 Series B FRN 15 —

References