CVE-2021-32926
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an illegitimate hash. The user would no longer be able to authenticate to the controller (Micro800: All versions, MicroLogix 1400: Version 21 and later) causing a denial-of-service condition
Cuando se produce una petición de cambio de contraseña autenticada, esta vulnerabilidad podría permitir al atacante interceptar el mensaje que incluye el hash legítimo de la nueva contraseña y reemplazarlo por un hash ilegítimo. El usuario ya no podría ser capaz de autenticarse en el controlador (Micro800: todas las versiones, MicroLogix 1400: versión 21 y posteriores), causando una condición de denegación de servicio
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-05-13 CVE Reserved
- 2021-06-03 CVE Published
- 2024-05-22 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-300: Channel Accessible by Non-Endpoint
CAPEC
References (1)
URL | Tag | Source |
---|---|---|
https://us-cert.cisa.gov/ics/advisories/icsa-21-145-02 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Rockwellautomation Search vendor "Rockwellautomation" | Micro800 Firmware Search vendor "Rockwellautomation" for product "Micro800 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Micro800 Search vendor "Rockwellautomation" for product "Micro800" | - | - |
Safe
|
Rockwellautomation Search vendor "Rockwellautomation" | Micrologix 1400 Firmware Search vendor "Rockwellautomation" for product "Micrologix 1400 Firmware" | >= 21.0 Search vendor "Rockwellautomation" for product "Micrologix 1400 Firmware" and version " >= 21.0" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Micrologix 1400 Search vendor "Rockwellautomation" for product "Micrologix 1400" | - | - |
Safe
|