CVE-2021-33012CWE-20

Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when…

High · published July 9, 2021

CVSS v3.1
7.5
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is switched to RUN mode, which results in a denial-of-service condition. If successfully exploited, this vulnerability will cause the controller to fault whenever the controller is switched to RUN mode.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02637 · 85.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-07-09T14:03Z
EPSS history
Timeline
  • 09 JUL 14:03Z
    Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when…
    cvelistv5