CVE-2014-5410: Rockwell Automation Micrologix 1400 Improper Input Validation

Published Oct 3, 2014

Updated

The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption) via malformed packets over (1) an Ethernet network or (2) a serial line.

Affected Software

1 affected component

rockwellautomation Ab Micrologix Controller=1400

Remediation

Information

Rockwell Automation has released a new version of MicroLogix 1400 Series B firmware to address the vulnerability and reduce associated risk to successful exploitation. Subsequent versions of MicroLogix 1400 Series B firmware and newer will incorporate these same enhancements. Rockwell Automation recommends the following immediate mitigation strategies (when possible, multiple strategies should be employed simultaneously): * Upgrade all MicroLogix 1400 Series B controllers to Series B FRN 15.001 or higher. Current firmware for the MicroLogix 1400 Series B platform can be obtained at the following web address: http://www.rockwellautomation.com/rockwellautomation/support/pcdc.page Please refer to Rockwell Automation’s product disclosure (AID 620295) for more information on this topic available at: https://rockwellautomation.custhelp.com/app/answers/detail/a_id/620295

Event History

Oct 3, 2014

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·06:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-5410?

The severity of CVE-2014-5410 is high due to its potential to cause denial of service on affected Rockwell Automation MicroLogix controllers.

How do I fix CVE-2014-5410?

To fix CVE-2014-5410, update the firmware of the affected MicroLogix controllers to version 15.001 or later.

What systems are affected by CVE-2014-5410?

CVE-2014-5410 affects Rockwell Automation Allen-Bradley MicroLogix 1400 controllers with firmware versions before 15.001.

What kind of attack does CVE-2014-5410 facilitate?

CVE-2014-5410 facilitates remote denial of service attacks via malformed packets on Ethernet networks.

Is CVE-2014-5410 related to remote access vulnerabilities?

Yes, CVE-2014-5410 allows for remote attacks which can lead to process disruption on affected devices.