CVE-2014-5410

The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption) via malformed packets over (1) an Ethernet network or (2) a serial line.

Score

CVSS 2.0 7.1 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2014-10-03

Last modified

2025-11-04

Weaknesses

CWE-20, CWE-399

Affected products

• Allen-bradley Micrologix 1400 (Rockwell Automation)
• Ab Micrologix Controller (Rockwellautomation)

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-254-02.json
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/620295
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-254-02
• https://ics-cert.us-cert.gov/advisories/ICSA-14-254-02