CVE-2017-14468

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information, modification of settings, or modification of ladder logic. An attacker can send unauthenticated packets to trigger this vulnerability. Required Keyswitch State: REMOTE or PROG Description: This ability is leveraged in a larger exploit to flash custom firmware.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Talos	Allen Bradley	Allen Bradley Micrologix 1400 Series B FRN 21.2, Allen Bradley Micrologix 1400 Series B FRN 21.0, Allen Bradley Micrologix 1400 Series B FRN 15

References

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443Exploit, Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443Exploit, Third Party Advisory

Timeline

Published: Apr 5, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-144699.8An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl CVE-2017-14475.4IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code CVE-2017-144709.8An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl CVE-2017-144719.8An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl CVE-2017-144729.8An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl CVE-2017-144739.8An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl CVE-2017-144749.8In the MMM::Agent::Helpers::_execute function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1, a specially crafted MMM prot CVE-2017-144759.8In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Linux), a special CVE-2017-144769.8In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Solaris), a speci CVE-2017-144779.8In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for FreeBSD), a speci CVE-2017-144789.8In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Linux), a speci CVE-2017-144799.8In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Solaris), a spe