CVE-2017-12090: High severity rockwell automation micrologix 1400 vulnerability
An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a device power cycle resulting in downtime for the device. An attacker can send one packet to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-12090?
CVE-2017-12090 is a denial of service vulnerability in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below.
How severe is CVE-2017-12090?
CVE-2017-12090 has a severity rating of 7.5 out of 10, indicating a high severity.
What software is affected by CVE-2017-12090?
The Allen Bradley Micrologix 1400 Series B FRN 21.2 and below firmware is affected by CVE-2017-12090.
How can CVE-2017-12090 be exploited?
CVE-2017-12090 can be exploited by sending a specially crafted snmp-set request without associated firmware flashing snmp-set commands.
Is Rockwellautomation Micrologix 1400 vulnerable to CVE-2017-12090?
No, Rockwellautomation Micrologix 1400 is not vulnerable to CVE-2017-12090.