CVE-2017-7903

CVE-2017-7903 describes a weak password requirement vulnerability in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 programmable logic controllers (PLCs) across various series and versions prior to 16.00. The affected PLCs utilize numeric passwords with a small maximum character size, making them highly susceptible to brute-force attacks. This vulnerability carries a critical CVSS v3.0 score of 9.8, indicating a severe risk. It can be exploited remotely over the network with low attack complexity, requiring no user interaction or privileges. Successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of the affected systems. Despite its high severity, there is no evidence of active exploitation (KEV list) or publicly available exploit code (Metasploit, Nuclei, ExploitDB). Community discussion and media coverage are minimal, suggesting a low current threat landscape for this specific CVE.