CVE-2020-6984

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2020-03-16

Last modified

2026-06-03

Weaknesses

CWE-327

Affected products

• Micrologix 1100 Firmware (Rockwellautomation)
• Micrologix 1400 A Firmware (Rockwellautomation)
• Micrologix 1400 B Firmware (Rockwellautomation)
• Rslogix 500 (Rockwellautomation)

References

• https://www.us-cert.gov/ics/advisories/icsa-20-070-06