title: MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack
description:
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device
problem types: CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel
affected:
{
defaultStatus: unaffected
product: MicroLogix 1100
vendor: Rockwell Automation
versions:
status: affected, version: All
}
{
defaultStatus: unaffected
product: MicroLogix 1400-B/C
vendor: Rockwell Automation
versions:
status: affected, version: 21.007 and below
}
{
defaultStatus: unaffected
product: MicroLogix 1400-A
vendor: Rockwell Automation
versions:
status: affected, version: 7.000 and below
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL