PT-2017-17982 · Rockwell Automation · Micrologix 1400+1

Published 2017-06-30 · Updated 2024-10-21 · CVE-2017-7901

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers versions 16.00 and prior Rockwell Automation Allen-Bradley MicroLogix 1400 programmable logic controllers versions 16.00 and prior

Description A Predictable Value Range from Previous Values issue was discovered, where insufficiently random TCP initial sequence numbers are generated. This may allow an attacker to predict the numbers from previous values, potentially enabling them to spoof or disrupt TCP connections and resulting in a denial of service for the target device.

Recommendations For Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers versions 16.00 and prior, update to a version later than 16.00 to resolve the issue. For Rockwell Automation Allen-Bradley MicroLogix 1400 programmable logic controllers versions 16.00 and prior, update to a version later than 16.00 to resolve the issue.

Fix

DoS

Use of Insufficiently Random Values

Weakness Enumeration

CWE-343

CWE-330

Related Identifiers

CVE-2017-7901

Affected Products

Micrologix 1100

Micrologix 1400

References · 5

• https://osv.dev/vulnerability/CVE-2017-7901 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-7901 · Security Note
• http://securitytracker.com/id/1038546 · Note
• https://twitter.com/jmcmurry/status/1848502612649468181 · Twitter Post