CVE-2017-14466

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B…

Critical · published April 5, 2018

CVSS v3.0
10.0
EPSS
38%
Percentile
98.5
In the wild
Unconfirmed
What it is

🚨 This Allen Bradley Micrologix vulnerability lets an attacker send unauthenticated packets to manipulate critical settings — think of it as a sneaky imp stealing the keys to your operation! 🔥 Imagine if a restaurant's chef left the door to the kitchen unlocked, allowing anyone to walk in and change the recipe for a popular dish. This vulnerability works similarly, granting unauthorized users the ability to alter crucial settings and secrets like the Master Password. 🍽️ An attacker could waltz right in and modify sensitive information, change your settings, or even overwrite the ladder logic controlling your processes. With such control, they could wreak havoc on your operations, resulting in everything from downtime to complete system compromise. This is absolutely devastating! ⚠️

Put simply

Imagine if a restaurant's chef left the door to the kitchen unlocked, allowing anyone to walk in and change the recipe for a popular dish. This vulnerability works similarly, granting unauthorized users the ability to alter crucial settings and secrets like the Master Password. 🍽️ CVE-2017-14466 exposes a critical access control vulnerability in the file permissions of Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier. By sending specially crafted packets, an attacker can perform unauthorized read or write operations, compromising sensitive data. ⚡

What to do

An attacker could waltz right in and modify sensitive information, change your settings, or even overwrite the ladder logic controlling your processes. With such control, they could wreak havoc on your operations, resulting in everything from downtime to complete system compromise. This is absolutely devastating! ⚠️ To safeguard your systems, upgrade to FRN 21.3 or later immediately. Additionally, restrict network access to the device and implement strict authentication measures to prevent unauthorized packet sending. Don't wait on this one! 🛡️ You've got this! With the right updates and precautions, you can secure your systems and keep those sneaky attackers at bay! 🚀

The record
Technical detail
CVSS v3.0
10.0 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.37965 · 98.5th percentile
Published
2018-04-05T21:00Z
EPSS history
Timeline
  • 05 APR 21:00Z
    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B…
    cvelistv5