1. Home
  2. CVE Database
  3. CVE-2017-16740
CRITICAL · 10.0

CVE-2017-16740

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has b...

Vulnerability Description

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.

CVSS Score

10.0

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Rockwellautomation1766-L32Bxba Firmware<= 21.002
Rockwellautomation1766-L32Bxba-
Rockwellautomation1766-L32Awa Firmware<= 21.002
Rockwellautomation1766-L32Awa-
Rockwellautomation1766-L32Bxb Firmware<= 21.002
Rockwellautomation1766-L32Bxb-
Rockwellautomation1766-L32Bwaa Firmware<= 21.002
Rockwellautomation1766-L32Bwaa-
Rockwellautomation1766-L32Awaa Firmware<= 21.002
Rockwellautomation1766-L32Awaa-
Rockwellautomation1766-L32Bwa Firmware<= 21.002
Rockwellautomation1766-L32Bwa-

Related Weaknesses (CWE)

CWE-120CWE-119

References

FAQ

What is CVE-2017-16740?

CVE-2017-16740 is a vulnerability with a CVSS score of 10.0 (CRITICAL). A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has b...

How severe is CVE-2017-16740?

CVE-2017-16740 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2017-16740?

Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation 1766-L32Bxba Firmware, Rockwellautomation 1766-L32Bxba, Rockwellautomation 1766-L32Awa Firmware, Rockwellautomation 1766-L32Awa, Rockwellautomation 1766-L32Bxb Firmware.