PT-2021-15157 · Rockwell Automation · Micrologix 1400

Published 2021-03-25 · Updated 2024-10-04 · CVE-2021-22659

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation MicroLogix 1400 versions 21.6 and below

Description The issue allows a remote unauthenticated attacker to send a specially crafted Modbus packet, enabling the retrieval or modification of random values in the register. Successful exploitation may lead to a buffer overflow, resulting in a denial-of-service condition. The FAULT LED will flash RED, and communications may be lost. Recovery from the denial-of-service condition requires the fault to be cleared by the user.

Recommendations For Rockwell Automation MicroLogix 1400 versions 21.6 and below, update to a version above 21.6 to resolve the issue. As a temporary workaround, consider restricting access to the Modbus protocol to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-22659

Affected Products

Micrologix 1400

References · 6

• https://osv.dev/vulnerability/CVE-2021-22659 · Vendor Advisory
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1129877/loc/en_US#__highlight · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22659 · Security Note
• https://twitter.com/OPSWAT/status/1842127550161486092 · Twitter Post
• https://t.me/cvenotify/11963 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-21-033-01 · Note