CVE-2017-7924 – Allen-Bradley's Legacy Protocol (PCCC) Denial Of Service

https://notcve.org/view.php?id=CVE-2017-7924

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition. Se ha descubierto un problema de validación de entrada incorrecta en los controladores Rockwell Automation MicroLogix 1100 1763-L16BWA, 1763-L16AWA, 1763-L16BBB y 1763-L16DWD. Un atacante remoto sin autenticar podría enviar un único paquete de tipo Programmable Controller Communication Commands (PCCC) manipulado al controlador que podría provocar que el controlador entre en una denegación de servicio. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition. • http://www.securityfocus.com/bid/99622 https://ics-cert.us-cert.gov/advisories/ICSA-17-138-03 • CWE-20: Improper Input Validation •