PT-2018-5668 · Allen Bradley · Allen Bradley Micrologix 1400 Series B

Published 2018-04-05 · Updated 2022-04-19 · CVE-2017-14473

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions FRN 21.2 and before

Description: The issue allows for an exploitable access control vulnerability in the data, program, and function file permissions functionality. This can be triggered by a specially crafted packet, resulting in the disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to exploit this issue. The vulnerability can be triggered regardless of the Keyswitch State.

Recommendations: For Allen Bradley Micrologix 1400 Series B versions FRN 21.2 and before, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2017-14473

Affected Products

Allen Bradley Micrologix 1400 Series B

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0443 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14473 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14473 · Vendor Advisory