CVE-2017-16740 A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has b...
CriticalCVSS 10.0
EPSS 7.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation 1766-l32bxba firmware | <= 21.002 | No fix listed |
| rockwellautomation 1766-l32awa firmware | <= 21.002 | No fix listed |
| rockwellautomation 1766-l32bxb firmware | <= 21.002 | No fix listed |
| rockwellautomation 1766-l32bwaa firmware | <= 21.002 | No fix listed |
| rockwellautomation 1766-l32awaa firmware | <= 21.002 | No fix listed |
| rockwellautomation 1766-l32bwa firmware | <= 21.002 | No fix listed |
References
- 102474 mitigation third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- rockwellautomation.custhelp.com