CVE-2017-7924

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition.

Score

CVSS 3.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-09-20

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• 1763-l16awa Firmware (Rockwellautomation)
• 1763-l16bbb Firmware (Rockwellautomation)
• 1763-l16bwa Firmware (Rockwellautomation)
• 1763-l16dwd Firmware (Rockwellautomation)

References

• http://www.securityfocus.com/bid/99622
• https://ics-cert.us-cert.gov/advisories/ICSA-17-138-03