peter bassill · operator
$ cve CVE-2017-16740 JSON

CVE-2017-16740

10.0
CRITICAL · CVSS 3.0 · EPSS 7.2% (pctl 94)

In your normal cycle

Critical by CVSS (10), but no sign of active exploitation.

Description

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.

Scoring

CVSS10.0 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS7.2% — more likely to be exploited than 94% of all CVEs
WeaknessCWE-120
On CISA KEVno
Public exploitnone known
Published2018-01-09
Last modified2026-06-17

Affected (12)

VendorProduct
rockwellautomation1766-l32awa
rockwellautomation1766-l32awa firmware
rockwellautomation1766-l32awaa
rockwellautomation1766-l32awaa firmware
rockwellautomation1766-l32bwa
rockwellautomation1766-l32bwa firmware
rockwellautomation1766-l32bwaa
rockwellautomation1766-l32bwaa firmware
rockwellautomation1766-l32bxb
rockwellautomation1766-l32bxb firmware
rockwellautomation1766-l32bxba
rockwellautomation1766-l32bxba firmware

References

→ the Explorer  ·  watch your stack  ·  NVD