Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-7898
HistoryJun 30, 2017 - 3:29 a.m.

CVE-2017-7898

2017-06-3003:29:00
CWE-307
[email protected]
web.nvd.nist.gov
8

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

24.2%

JSON

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. There are no penalties for repeatedly entering incorrect passwords.

Affected configurations

Nvd
Node
rockwellautomation1763-l16awa_series_aRange≤16.000
OR
rockwellautomation1763-l16awa_series_bRange≤16.000
OR
rockwellautomation1763-l16bbb_series_aRange≤16.000
OR
rockwellautomation1763-l16bbb_series_bRange≤16.000
OR
rockwellautomation1763-l16bwa_series_aRange≤16.000
OR
rockwellautomation1763-l16bwa_series_bRange≤16.000
OR
rockwellautomation1763-l16dwd_series_aRange≤16.000
OR
rockwellautomation1763-l16dwd_series_bRange≤16.000
AND
rockwellautomationab_micrologix_controllerMatch1100
Node
rockwellautomation1766-l32awa_series_aRange≤16.000
OR
rockwellautomation1766-l32awa_series_bRange≤16.000
OR
rockwellautomation1766-l32awaa_series_aRange≤16.000
OR
rockwellautomation1766-l32awaa_series_bRange≤16.000
OR
rockwellautomation1766-l32bwa_series_aRange≤16.000
OR
rockwellautomation1766-l32bwa_series_bRange≤16.000
OR
rockwellautomation1766-l32bwaa_series_aRange≤16.000
OR
rockwellautomation1766-l32bwaa_series_bRange≤16.000
OR
rockwellautomation1766-l32bxb_series_aRange≤16.000
OR
rockwellautomation1766-l32bxb_series_bRange≤16.000
OR
rockwellautomation1766-l32bxba_series_aRange≤16.000
OR
rockwellautomation1766-l32bxba_series_bRange≤16.000
AND
rockwellautomationab_micrologix_controllerMatch1400
VendorProductVersionCPE
rockwellautomation1763-l16awa_series_a*cpe:2.3:a:rockwellautomation:1763-l16awa_series_a:*:*:*:*:*:*:*:*
rockwellautomation1763-l16awa_series_b*cpe:2.3:a:rockwellautomation:1763-l16awa_series_b:*:*:*:*:*:*:*:*
rockwellautomation1763-l16bbb_series_a*cpe:2.3:a:rockwellautomation:1763-l16bbb_series_a:*:*:*:*:*:*:*:*
rockwellautomation1763-l16bbb_series_b*cpe:2.3:a:rockwellautomation:1763-l16bbb_series_b:*:*:*:*:*:*:*:*
rockwellautomation1763-l16bwa_series_a*cpe:2.3:a:rockwellautomation:1763-l16bwa_series_a:*:*:*:*:*:*:*:*
rockwellautomation1763-l16bwa_series_b*cpe:2.3:a:rockwellautomation:1763-l16bwa_series_b:*:*:*:*:*:*:*:*
rockwellautomation1763-l16dwd_series_a*cpe:2.3:a:rockwellautomation:1763-l16dwd_series_a:*:*:*:*:*:*:*:*
rockwellautomation1763-l16dwd_series_b*cpe:2.3:a:rockwellautomation:1763-l16dwd_series_b:*:*:*:*:*:*:*:*
rockwellautomationab_micrologix_controller1100cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1100:*:*:*:*:*:*:*
rockwellautomation1766-l32awa_series_a*cpe:2.3:a:rockwellautomation:1766-l32awa_series_a:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 221

Related

cve 1
prion 1
nessus 2
cvelist 1
ics 1
cve
cve
CVE-2017-7898
2017-06-30 03:29:00
prion
prion
Input validation
2017-06-30 03:29:00
nessus
nessus
Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 Improper Restriction of Excessive Authentication Attempts (CVE-2017-7898)
2022-02-07 00:00:00
Rockwellautomation 1763-l16awa Improper Restriction of Excessive Authentication Attempts
2019-11-08 00:00:00
cvelist
cvelist
CVE-2017-7898
2017-06-30 02:35:00
ics
ics
Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400
2017-05-23 12:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

24.2%

JSON
Related for NVD:CVE-2017-7898
cve1prion1nessus2cvelist1ics1