CVE-2017-12088

An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted packet can cause a device power cycle resulting in a fault state and deletion of ladder logic. An attacker can send one unauthenticated packet to trigger this vulnerability

Score

CVSS 3.0 8.6 High

Status

Modified - talos-cna@cisco.com

Published

2018-04-05

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Micrologix 1400 B Firmware (Rockwellautomation)
• Allen Bradley (Talos)

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0440