CVE-2017-7924

moderate-risk
Published 2017-09-20

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition.

Do I need to act?

~
10.0% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (4)

1763-L16Bwa Firmware
1763-L16Dwd Firmware
1763-L16Awa Firmware
1763-L16Bbb Firmware

Affected Vendors

Rockwellautomation

References (4)

Third Party Advisory http://www.securityfocus.com/bid/99622
Mitigation https://ics-cert.us-cert.gov/advisories/ICSA-17-138-03
Third Party Advisory http://www.securityfocus.com/bid/99622
Mitigation https://ics-cert.us-cert.gov/advisories/ICSA-17-138-03
47
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 11/34 · Low
Exposure 10/34 · Low