PT-2018-5664 · Allen Bradley · Allen Bradley Micrologix 1400 Series B

Published 2018-04-05 · Updated 2022-04-19 · CVE-2017-14469

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions 21.2 and before

Description: The issue allows for an exploitable access control vulnerability in the data, program, and function file permissions functionality. A specially crafted packet can cause a read or write operation, resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this issue. The vulnerability is associated with a non-user fault type and fault code 0028, which can be triggered by setting invalid values (0x01 and 0x02) for the user fault routine. This can be done by writing directly to the file, and when the device is moved into a run state, a fault is triggered.

Recommendations: For Allen Bradley Micrologix 1400 Series B versions 21.2 and before, consider restricting access to the device to prevent unauthenticated packets from being sent, and avoid writing directly to the file to set invalid values for the user fault routine. As a temporary workaround, consider disabling remote access when not necessary to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2017-14469

Affected Products

Allen Bradley Micrologix 1400 Series B

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0443 · Exploit
• https://osv.dev/vulnerability/CVE-2017-14469 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14469 · Security Note