Vulnerability Details CVE-2017-12093
An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to the PLC being disconnected. An attacker can send unauthenticated packets to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.032
EPSS Ranking 86.4%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
Products affected by CVE-2017-12093
-
cpe:2.3:h:rockwellautomation:micrologix_1400:-
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:-
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:11.000
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:12.001
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:13.000
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:13.003
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:14.000
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:14.002
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:15.000
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:15.001
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:15.002
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:15.003
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:15.004
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:15.005
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:16.000
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:16.001
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:16.002
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:21.000
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:21.001
-
cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:21.002