Vulnerability · Published Mar 25, 2021 · Assigned by icscert
CVE-2021-22659
High 7.5
In plain English
A high-severity buffer overflow in Rockwell Automation MicroLogix 1400. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities).
Official description
Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a denial-of-service condition. The FAULT LED will flash RED and communications may be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Rockwell Automation MicroLogix 1400 | MicroLogix 1400, All series Version 21.6 and below |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H