CVE-2017-7924 An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could se...
HighCVSS 7.5
EPSS 22.2%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation 1763-l16bwa firmware | All versions | No fix listed |
| rockwellautomation 1763-l16awa firmware | All versions | No fix listed |
| rockwellautomation 1763-l16bbb firmware | All versions | No fix listed |
| rockwellautomation 1763-l16dwd firmware | All versions | No fix listed |
References
- 99622 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource