CVE-2017-14469 is a critical access control vulnerability affecting Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier, specifically in its data, program, and function file permissions. This vulnerability allows an unauthenticated attacker to send specially crafted packets over the network to perform read or write operations. Such actions can lead to sensitive information disclosure, modification of device settings, or alteration of ladder logic, with a CVSS v3.0 score of 9.8 (Critical). While the vulnerability has a high FAUCET Risk Score of 97/100, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 21.2CPE matchmatch criteria | cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.