Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIcscertCVE-2017-7902
HistoryJun 30, 2017 - 3:29 a.m.

CVE-2017-7902

2017-06-3003:29:00
CWE-330
CWE-323
icscert
web.nvd.nist.gov
51
cve-2017-7902
nonce reuse
key pair reuse
rockwell automation
plc
programmable logic controllers
security vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

34.8%

JSON

A “Reusing a Nonce, Key Pair in Encryption” issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected product reuses nonces, which may allow an attacker to capture and replay a valid request until the nonce is changed.

Affected configurations

Nvd
Node
rockwellautomation1763-l16awa_series_aRange≤16.000
OR
rockwellautomation1763-l16awa_series_bRange≤16.000
OR
rockwellautomation1763-l16bbb_series_aRange≤16.000
OR
rockwellautomation1763-l16bbb_series_bRange≤16.000
OR
rockwellautomation1763-l16bwa_series_aRange≤16.000
OR
rockwellautomation1763-l16bwa_series_bRange≤16.000
OR
rockwellautomation1763-l16dwd_series_aRange≤16.000
OR
rockwellautomation1763-l16dwd_series_bRange≤16.000
AND
rockwellautomationab_micrologix_controllerMatch1100
Node
rockwellautomation1766-l32awa_series_aRange≤16.000
OR
rockwellautomation1766-l32awa_series_bRange≤16.000
OR
rockwellautomation1766-l32awaa_series_aRange≤16.000
OR
rockwellautomation1766-l32awaa_series_bRange≤16.000
OR
rockwellautomation1766-l32bwa_series_aRange≤16.000
OR
rockwellautomation1766-l32bwa_series_bRange≤16.000
OR
rockwellautomation1766-l32bwaa_series_aRange≤16.000
OR
rockwellautomation1766-l32bwaa_series_bRange≤16.000
OR
rockwellautomation1766-l32bxb_series_aRange≤16.000
OR
rockwellautomation1766-l32bxb_series_bRange≤16.000
OR
rockwellautomation1766-l32bxba_series_aRange≤16.000
OR
rockwellautomation1766-l32bxba_series_bRange≤16.000
AND
rockwellautomationab_micrologix_controllerMatch1400
VendorProductVersionCPE
rockwellautomation1763-l16awa_series_a*cpe:2.3:a:rockwellautomation:1763-l16awa_series_a:*:*:*:*:*:*:*:*
rockwellautomation1763-l16awa_series_b*cpe:2.3:a:rockwellautomation:1763-l16awa_series_b:*:*:*:*:*:*:*:*
rockwellautomation1763-l16bbb_series_a*cpe:2.3:a:rockwellautomation:1763-l16bbb_series_a:*:*:*:*:*:*:*:*
rockwellautomation1763-l16bbb_series_b*cpe:2.3:a:rockwellautomation:1763-l16bbb_series_b:*:*:*:*:*:*:*:*
rockwellautomation1763-l16bwa_series_a*cpe:2.3:a:rockwellautomation:1763-l16bwa_series_a:*:*:*:*:*:*:*:*
rockwellautomation1763-l16bwa_series_b*cpe:2.3:a:rockwellautomation:1763-l16bwa_series_b:*:*:*:*:*:*:*:*
rockwellautomation1763-l16dwd_series_a*cpe:2.3:a:rockwellautomation:1763-l16dwd_series_a:*:*:*:*:*:*:*:*
rockwellautomation1763-l16dwd_series_b*cpe:2.3:a:rockwellautomation:1763-l16dwd_series_b:*:*:*:*:*:*:*:*
rockwellautomationab_micrologix_controller1100cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1100:*:*:*:*:*:*:*
rockwellautomation1766-l32awa_series_a*cpe:2.3:a:rockwellautomation:1766-l32awa_series_a:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 221

CNA Affected

[
  {
    "product": "Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400"
      }
    ]
  }
]

Related

prion 1
nessus 2
cvelist 1
nvd 1
ics 1
prion
prion
Design/Logic Flaw
2017-06-30 03:29:00
nessus
nessus
Rockwellautomation 1763-l16awa Use of Insufficiently Random Values
2019-11-08 00:00:00
Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 Reusing a Nonce, Key Pair in Encryption (CVE-2017-7902)
2022-02-07 00:00:00
cvelist
cvelist
CVE-2017-7902
2017-06-30 02:35:00
nvd
nvd
CVE-2017-7902
2017-06-30 03:29:00
ics
ics
Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400
2017-05-23 12:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

34.8%

JSON
Related for CVE-2017-7902
prion1nessus2cvelist1nvd1ics1