CVE-2017-7903
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected products use a numeric password with a small maximum character size for the password.
Se detectó un problema de Requisitos de Contraseña Débiles en los controladores lógicos programables MicroLogix 1100 1763-L16AWA, Series A y B, versión 16.00 y anteriores; 1763-L16BBB, Serie A y B, versión 16.00 y anteriores; 1763-L16BWA, Serie A y B, versión 16.00 y anteriores; y 1763-L16DWD, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation y controladores lógicos programables MicroLogix 1400 1766-L32AWA, Series A y B, versión 16.00 y anteriores; 1766-L32BWA, Serie A y B, versión 16.00 y anteriores; 1766-L32BWAA, Serie A y B, versión 16.00 y anteriores; 1766-L32BXB, Serie A y B, versión 16.00 y anteriores; 1766-L32BXBA, Serie A y B, versión 16.00 y anteriores; y 1766-L32AWAA, Series A y B, versión 16.00 y anteriores de Allen-Bradley en Rockwell Automation. Los productos afectados usan una contraseña numérica con un pequeño tamaño máximo de caracteres para la contraseña.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-04-18 CVE Reserved
- 2017-06-30 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-326: Inadequate Encryption Strength
- CWE-521: Weak Password Requirements
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1038546 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04 | 2017-07-08 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Rockwellautomation Search vendor "Rockwellautomation" | 1763-l16awa Series A Search vendor "Rockwellautomation" for product "1763-l16awa Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1763-l16awa Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1100 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1100" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1763-l16awa Series B Search vendor "Rockwellautomation" for product "1763-l16awa Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1763-l16awa Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1100 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1100" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1763-l16bbb Series A Search vendor "Rockwellautomation" for product "1763-l16bbb Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1763-l16bbb Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1100 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1100" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1763-l16bbb Series B Search vendor "Rockwellautomation" for product "1763-l16bbb Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1763-l16bbb Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1100 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1100" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1763-l16bwa Series A Search vendor "Rockwellautomation" for product "1763-l16bwa Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1763-l16bwa Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1100 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1100" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1763-l16bwa Series B Search vendor "Rockwellautomation" for product "1763-l16bwa Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1763-l16bwa Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1100 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1100" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1763-l16dwd Series A Search vendor "Rockwellautomation" for product "1763-l16dwd Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1763-l16dwd Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1100 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1100" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1763-l16dwd Series B Search vendor "Rockwellautomation" for product "1763-l16dwd Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1763-l16dwd Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1100 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1100" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32awa Series A Search vendor "Rockwellautomation" for product "1766-l32awa Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32awa Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32awa Series B Search vendor "Rockwellautomation" for product "1766-l32awa Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32awa Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32awaa Series A Search vendor "Rockwellautomation" for product "1766-l32awaa Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32awaa Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32awaa Series B Search vendor "Rockwellautomation" for product "1766-l32awaa Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32awaa Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32bwa Series A Search vendor "Rockwellautomation" for product "1766-l32bwa Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32bwa Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32bwa Series B Search vendor "Rockwellautomation" for product "1766-l32bwa Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32bwa Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32bwaa Series A Search vendor "Rockwellautomation" for product "1766-l32bwaa Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32bwaa Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32bwaa Series B Search vendor "Rockwellautomation" for product "1766-l32bwaa Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32bwaa Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32bxb Series A Search vendor "Rockwellautomation" for product "1766-l32bxb Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32bxb Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32bxb Series B Search vendor "Rockwellautomation" for product "1766-l32bxb Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32bxb Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32bxba Series A Search vendor "Rockwellautomation" for product "1766-l32bxba Series A" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32bxba Series A" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | 1766-l32bxba Series B Search vendor "Rockwellautomation" for product "1766-l32bxba Series B" | <= 16.000 Search vendor "Rockwellautomation" for product "1766-l32bxba Series B" and version " <= 16.000" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Ab Micrologix Controller Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" | 1400 Search vendor "Rockwellautomation" for product "Ab Micrologix Controller" and version "1400" | - |
Safe
|