PT-2017-17983 · Rockwell Automation · Micrologix 1400+1

David Formby + 1 · Published 2017-06-30 · Updated 2019-10-09 · CVE-2017-7902

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers versions 16.00 and prior Rockwell Automation Allen-Bradley MicroLogix 1400 programmable logic controllers versions 16.00 and prior

Description A "Reusing a Nonce, Key Pair in Encryption" issue was discovered, where the affected product reuses nonces. This may allow an attacker to capture and replay a valid request until the nonce is changed.

Recommendations For Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers versions 16.00 and prior, update to a version later than 16.00 to resolve the issue. For Rockwell Automation Allen-Bradley MicroLogix 1400 programmable logic controllers versions 16.00 and prior, update to a version later than 16.00 to resolve the issue.

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-323

CWE-330

Related Identifiers

CVE-2017-7902

Affected Products

Micrologix 1100

Micrologix 1400

References · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04 · Patch
• https://osv.dev/vulnerability/CVE-2017-7902 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7902 · Security Note
• http://securitytracker.com/id/1038546 · Note