Improper input validation in Rockwell Automation Allen-bradley Micrologix 1400
CVE-2014-5410
The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.001 (16.4th percentile) — read the EPSS interpretation.
Affected products
- Rockwell Automation Allen-bradley Micrologix 1400 — versions Series B FRN 15.001 or higher, 0
- Rockwellautomation Ab_micrologix_controller — versions 1400
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)