CVE-2017-12092 File upload in Allen Bradley
An attacker can send unauthenticated packets to write malicious programs to the memory module of Allen Bradley Micrologix 1400 PLCs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-12092?
CVE-2017-12092 is a low-severity vulnerability in Talos Allen Bradley, published on 4 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated packet to trigger this vulnerability.
Weakness: CWE-200
Which versions are affected by CVE-2017-12092?
It affects 1 product.
Products include Rockwellautomation Micrologix 1400 B Firmware.
How do I fix CVE-2017-12092?
No fix has been published for CVE-2017-12092 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-12092 being exploited?
There is no known exploitation of CVE-2017-12092 in the wild and no public exploit code.
Other vulnerabilities in Talos Allen Bradley
Sources
Also known as GHSA-6hqr-fv35-99wh.