CVE-2017-7902

First published: Fri Jun 30 2017(Updated: )

A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected product reuses nonces, which may allow an attacker to capture and replay a valid request until the nonce is changed.

Credit: ics-cert@hq.dhs.gov

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/author
• agent/weakness
• agent/references
• agent/severity
• agent/tags
• agent/type
• agent/event
• agent/description
• agent/remedy
• agent/last-modified-date
• agent/first-publish-date
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• vendor/rockwellautomation
• canonical/rockwellautomation 1763-l16awa series a
• version/rockwellautomation 1763-l16awa series a/16.000
• canonical/rockwellautomation 1763-l16awa series b
• version/rockwellautomation 1763-l16awa series b/16.000
• canonical/rockwellautomation 1763-l16bbb series a
• version/rockwellautomation 1763-l16bbb series a/16.000
• canonical/rockwellautomation 1763-l16bbb series b
• version/rockwellautomation 1763-l16bbb series b/16.000
• canonical/rockwellautomation 1763-l16bwa series a
• version/rockwellautomation 1763-l16bwa series a/16.000
• canonical/rockwellautomation 1763-l16bwa series b
• version/rockwellautomation 1763-l16bwa series b/16.000
• canonical/rockwellautomation 1763-l16dwd series a
• version/rockwellautomation 1763-l16dwd series a/16.000
• canonical/rockwellautomation 1763-l16dwd series b
• version/rockwellautomation 1763-l16dwd series b/16.000
• canonical/rockwellautomation ab micrologix controller
• version/rockwellautomation ab micrologix controller/1100
• canonical/rockwellautomation 1766-l32awa series a
• version/rockwellautomation 1766-l32awa series a/16.000
• canonical/rockwellautomation 1766-l32awa series b
• version/rockwellautomation 1766-l32awa series b/16.000
• canonical/rockwellautomation 1766-l32awaa series a
• version/rockwellautomation 1766-l32awaa series a/16.000
• canonical/rockwellautomation 1766-l32awaa series b
• version/rockwellautomation 1766-l32awaa series b/16.000
• canonical/rockwellautomation 1766-l32bwa series a
• version/rockwellautomation 1766-l32bwa series a/16.000
• canonical/rockwellautomation 1766-l32bwa series b
• version/rockwellautomation 1766-l32bwa series b/16.000
• canonical/rockwellautomation 1766-l32bwaa series a
• version/rockwellautomation 1766-l32bwaa series a/16.000
• canonical/rockwellautomation 1766-l32bwaa series b
• version/rockwellautomation 1766-l32bwaa series b/16.000
• canonical/rockwellautomation 1766-l32bxb series a
• version/rockwellautomation 1766-l32bxb series a/16.000
• canonical/rockwellautomation 1766-l32bxb series b
• version/rockwellautomation 1766-l32bxb series b/16.000
• canonical/rockwellautomation 1766-l32bxba series a
• version/rockwellautomation 1766-l32bxba series a/16.000
• canonical/rockwellautomation 1766-l32bxba series b
• version/rockwellautomation 1766-l32bxba series b/16.000
• version/rockwellautomation ab micrologix controller/1400