Rockwell Automation Micro800 and MicroLogix 1400
Successful exploitation of this vulnerability may result in denial-of-service conditions, which may require a firmware flash to recover.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-32926US | high7.5 | — | ||
When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- MitigationMicro800
A comprehensive defense-in-depth strategy can reduce the risk of this vulnerability. To leverage the vulnerability, an unauthorized user would require access to the same network as the controller. Users should confirm they are employing proper networking segmentation and security controls.
- MitigationMicroLogix 1400
A comprehensive defense-in-depth strategy can reduce the risk of this vulnerability. To leverage the vulnerability, an unauthorized user would require access to the same network as the controller. Users should confirm they are employing proper networking segmentation and security controls.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan