PT-2018-5657 · Allen Bradley · Allen Bradley Micrologix 1400 Series B

Published 2018-04-05 · Updated 2022-12-14 · CVE-2017-14462

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions 21.2 and before

Description: An exploitable access control issue exists in the data, program, and function file permissions functionality. A specially crafted packet can cause a read or write operation, resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this issue. The required Keyswitch State is REMOTE or PROG, and also RUN for some configurations. This allows an attacker to enable features like SNMP, Modbus, DNP, and change network parameters such as IP address, name server, and domain name.

Recommendations: For versions 21.2 and before, consider disabling remote access or restricting the Keyswitch State to prevent exploitation until a fix is available. Restrict access to the channel configuration to minimize the risk of enabling unwanted features. Avoid using the REMOTE or PROG Keyswitch State until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2017-14462

Affected Products

Allen Bradley Micrologix 1400 Series B

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0443 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14462 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14462 · Vendor Advisory
• https://t.me/cvenotify/39860 · Telegram Post