peter bassill · operator
$ cve CVE-2017-7903 JSON

CVE-2017-7903

9.8
CRITICAL · CVSS 3.1 · EPSS 2.8% (pctl 86)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected products use a numeric password with a small maximum character size for the password.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS2.76% — more likely to be exploited than 86% of all CVEs
WeaknessCWE-521
On CISA KEVno
Public exploitnone known
Published2017-06-30
Last modified2026-06-17

Affected (21)

VendorProduct
rockwellautomation1763-l16awa series a
rockwellautomation1763-l16awa series b
rockwellautomation1763-l16bbb series a
rockwellautomation1763-l16bbb series b
rockwellautomation1763-l16bwa series a
rockwellautomation1763-l16bwa series b
rockwellautomation1763-l16dwd series a
rockwellautomation1763-l16dwd series b
rockwellautomation1766-l32awa series a
rockwellautomation1766-l32awa series b
rockwellautomation1766-l32awaa series a
rockwellautomation1766-l32awaa series b
rockwellautomation1766-l32bwa series a
rockwellautomation1766-l32bwa series b
rockwellautomation1766-l32bwaa series a
rockwellautomation1766-l32bwaa series b
rockwellautomation1766-l32bxb series a
rockwellautomation1766-l32bxb series b
rockwellautomation1766-l32bxba series a
rockwellautomation1766-l32bxba series b
rockwellautomationab micrologix controller

References

→ the Explorer  ·  watch your stack  ·  NVD