CVE-2017-14464

CVE-2017-14464 is a critical access control vulnerability affecting Allen Bradley Micrologix 1400 Series B PLCs with firmware FRN 21.2 and earlier. An unauthenticated attacker can send specially crafted packets to perform read or write operations, leading to sensitive information disclosure, modification of settings, or alteration of ladder logic. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity, resulting in high impact to confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, its high EPSS and FAUCET Risk Score indicate a significant potential for future exploitation.