ICSA-21-189-01

icsaUScisa_csaf_ot

Rockwell Automation MicroLogix 1100

view advisory published 2021-07-08

Successful exploitation of this vulnerability could allow an attacker to create a denial-of-service condition.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-33012UShigh8.6—
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is swi…
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • MitigationMicroLogix 1100

    A controller in this fault state can be recovered by downloading a new project or an offline copy of the project to the controller. Rockwell Automation recommends users set the controller switch to RUN mode to prevent remote programming. Users are encouraged to have a backup copy of the project in the case it is necessary to recover from an event. Rockwell Automation also recommends users should consider migrating to the Micro870 controller.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan