CVE-2017-16740: Buffer Overflow

Published Jan 9, 2018
·
Updated

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.

Affected Software

12 affected components
rockwellautomation 1766-l32bxba Firmware<=21.002
rockwellautomation 1766-l32bxba
rockwellautomation 1766-l32awa Firmware<=21.002
rockwellautomation 1766-l32awa
rockwellautomation 1766-l32bxb Firmware<=21.002
rockwellautomation 1766-l32bxb
rockwellautomation 1766-l32bwaa Firmware<=21.002
rockwellautomation 1766-l32bwaa
rockwellautomation 1766-l32awaa Firmware<=21.002
rockwellautomation 1766-l32awaa
rockwellautomation 1766-l32bwa Firmware<=21.002
rockwellautomation 1766-l32bwa

Event History

Jan 9, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness

Frequently Asked Questions

1

What is the severity of CVE-2017-16740?

CVE-2017-16740 is considered to have a high severity due to the potential for remote code execution.

2

How do I fix CVE-2017-16740?

To fix CVE-2017-16740, upgrade to the latest firmware version of the affected Rockwell Automation controllers beyond version 21.002.

3

What devices are affected by CVE-2017-16740?

CVE-2017-16740 affects Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C, with firmware versions 21.002 and earlier.

4

What type of vulnerability is CVE-2017-16740?

CVE-2017-16740 is a stack-based buffer overflow vulnerability.

5

Can CVE-2017-16740 be exploited remotely?

Yes, CVE-2017-16740 can potentially be exploited remotely, allowing attackers to execute code on the vulnerable devices.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203