PT-2014-6457 · Rockwell Automation · Micrologix 1400

Publicado 2014-10-03 · Atualizado 2025-11-04 · CVE-2014-5410

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers versions 7 and earlier Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx B FRN controllers versions prior to 15.001

Description The issue allows remote attackers to cause a denial of service, disrupting the process via malformed packets. This can occur over an Ethernet network or a serial line.

Recommendations For Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers versions 7 and earlier, update to a version later than 7 to resolve the issue. For Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx B FRN controllers versions prior to 15.001, update to version 15.001 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-399

CWE-20

Identificadores relacionados

CVE-2014-5410

Produtos afetados

Micrologix 1400

Referências · 7

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-254-02.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5410 · Nota de Segurança
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/620295 · Nota
• https://cisa.gov/news-events/ics-advisories/icsa-14-254-02 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-14-254-02 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5410 · Nota
• https://t.me/cveNotify/141744 · Publicação no Telegram