← Back to browse · API

CVE-2017-14464

Severity
CRITICAL
CVSS
10.0
EPSS
0.37317
Risk score
53.06
CISA KEV
No
PoC
No
Published
2018-04-05
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2017-5967, GHSA-J4X2-6MHF-RWCJ
Products
Talos:Allen Bradley Allen Bradley Micrologix 1400 Series B FRN 21.2, Allen Bradley Micrologix 1400 Series B FRN 21.0, Allen Bradley Micrologix 1400 Series B FRN 15
Sources
euvd EUVD-2017-5967

Description

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability.Required Keyswitch State: REMOTE or PROG Associated Fault Code: 0001 Fault Type: Non-User Description: A fault state can be triggered by setting the NVRAM/memory module user program mismatch bit (S2:9) when a memory module is NOT installed.

References