PT-2018-5658 · Allen Bradley · Micrologix 1400 Series B

Published 2018-04-05 · Updated 2022-12-14 · CVE-2017-14463

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions 21.2 and before

Description: An exploitable access control issue exists in the data, program, and function file permissions functionality. A specially crafted packet can cause a read or write operation, resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this issue. The required Keyswitch State is REMOTE or PROG, and the Associated Fault Code is 0012, which is a Non-User fault type. A fault state can be triggered by overwriting the ladder logic data file with null values.

Recommendations: For versions 21.2 and before, consider restricting access to the device when the Keyswitch State is set to REMOTE or PROG to minimize the risk of exploitation. As a temporary workaround, avoid using the device in these states until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2017-14463

Affected Products

Micrologix 1400 Series B

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0443 · Exploit
• https://osv.dev/vulnerability/CVE-2017-14463 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14463 · Security Note
• https://t.me/cvenotify/39861 · Telegram Post