Vulnerability Intelligence Report
CVE-2017-16740
A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.
No Active Exploit Signals
CVSS Base Score
10.0
CRITICAL
EPSS Probability:7.14%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-120 ↗CWE-120
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| rockwellautomation | 1766-l32bxba_firmware | all |
| rockwellautomation | 1766-l32bxba | all |
| rockwellautomation | 1766-l32awa_firmware | all |
| rockwellautomation | 1766-l32awa | all |
| rockwellautomation | 1766-l32bxb_firmware | all |
| rockwellautomation | 1766-l32bxb | all |
| rockwellautomation | 1766-l32bwaa_firmware | all |
| rockwellautomation | 1766-l32bwaa | all |
| rockwellautomation | 1766-l32awaa_firmware | all |
| rockwellautomation | 1766-l32awaa | all |
| rockwellautomation | 1766-l32bwa_firmware | all |
| rockwellautomation | 1766-l32bwa | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
7.145%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS) · CERT · USA |
| Reserved | 2017-11-09T00:00:00 |
| Published | 2018-01-09T21:00:00 |
| Patch Date | 2018-01-09 |
| Last Updated | 2024-08-05T20:35:21 |
Community Chatter & Buzz