CVE-2017-7914 describes a missing authorization vulnerability in Rockwell Automation PanelView Plus 6 700-1500 devices across numerous firmware versions. This flaw allows an unauthenticated remote attacker to gain unauthorized access to the device due to the absence of an authorization check during connection. With a CVSS v3 score of 8.6 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to partial confidentiality and integrity compromise, and complete availability impact. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, indicating no active exploitation. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.00-20140306CPE matchmatch criteria | cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.00-20140306:*:*:*:*:*:*:* | ||
6.00.04CPE matchmatch criteria | cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.00.04:*:*:*:*:*:*:* | ||
6.00.05CPE matchmatch criteria | cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.00.05:*:*:*:*:*:*:* | ||
6.00.42CPE matchmatch criteria | cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.00.42:*:*:*:*:*:*:* | ||
6.10-20140122CPE matchmatch criteria | cpe:2.3:o:rockwellautomation:panelview_plus_6_700-1500_firmware:6.10-20140122:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.