Denial of Service Vulnerability in Micro800 and MicroLogix 1400 Products by Rockwell Automation
CVE-2021-32926

7.5HIGH

Key Information:

Vendor

Rockwellautomation

Status
Micro800, Micrologix 1400
Vendor
CVE Published:
3 June 2021

What is CVE-2021-32926?

This vulnerability allows an authenticated user’s password change request to be intercepted by an attacker. The attacker can replace the intended new password hash with an illegitimate one, rendering the legitimate user unable to authenticate. As a result, this leads to a denial-of-service condition, significantly impacting the user's ability to access the controller effectively. The vulnerability affects all versions of Micro800 and MicroLogix 1400 starting from version 21.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Micro800, MicroLogix 1400 Micro800: All versions, MicroLogix 1400: Version 21 and later when Enhanced Password Security enabled.

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-145-02
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.