CVEvulnerability

CVE-2018-17924

8.6 HIGH Published 2018-12-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-12-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-306

Description

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller in the system is set to Hard RUN mode. When the affected device accepts this new IP configuration, a loss of communication occurs between the device and the rest of the system as the system traffic is still attempting to communicate with the device via the overwritten IP address.

Affected configurations

• rockwellautomation micrologix 1400 firmware • rockwellautomation 1756-enbt firmware • rockwellautomation 1756-eweb series a firmware • rockwellautomation 1756-eweb series b firmware • rockwellautomation 1756-en2f series a firmware • rockwellautomation 1756-en2f series b firmware • rockwellautomation 1756-en2f series c firmware (<= 10.10) • rockwellautomation 1756-en2t series a firmware • rockwellautomation 1756-en2t series b firmware • rockwellautomation 1756-en2t series c firmware • rockwellautomation 1756-en2t series d firmware (<= 10.10) • rockwellautomation 1756-en2tr series a firmware • rockwellautomation 1756-en2tr series b firmware • rockwellautomation 1756-en2tr series c firmware (<= 10.10) • rockwellautomation 1756-en3tr series a firmware • rockwellautomation 1756-en3tr series b firmware (<= 10.10)

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References