Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-7901

A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. Insufficiently random TCP initial sequence numbers are generated, which may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections, resulting in a denial of service for the target device.

Published

2017-06-30T03:29:00.797

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 8.6 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

8.5

Weaknesses
  • Type: Secondary
    CWE-343
  • Type: Primary
    CWE-330
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application rockwellautomation 1763-l16awa_series_a ≤ 16.000 Yes
Application rockwellautomation 1763-l16awa_series_b ≤ 16.000 Yes
Application rockwellautomation 1763-l16bbb_series_a ≤ 16.000 Yes
Application rockwellautomation 1763-l16bbb_series_b ≤ 16.000 Yes
Application rockwellautomation 1763-l16bwa_series_a ≤ 16.000 Yes
Application rockwellautomation 1763-l16bwa_series_b ≤ 16.000 Yes
Application rockwellautomation 1763-l16dwd_series_a ≤ 16.000 Yes
Application rockwellautomation 1763-l16dwd_series_b ≤ 16.000 Yes
Hardware rockwellautomation ab_micrologix_controller 1100 No
Application rockwellautomation 1766-l32awa_series_a ≤ 16.000 Yes
Application rockwellautomation 1766-l32awa_series_b ≤ 16.000 Yes
Application rockwellautomation 1766-l32awaa_series_a ≤ 16.000 Yes
Application rockwellautomation 1766-l32awaa_series_b ≤ 16.000 Yes
Application rockwellautomation 1766-l32bwa_series_a ≤ 16.000 Yes
Application rockwellautomation 1766-l32bwa_series_b ≤ 16.000 Yes
Application rockwellautomation 1766-l32bwaa_series_a ≤ 16.000 Yes
Application rockwellautomation 1766-l32bwaa_series_b ≤ 16.000 Yes
Application rockwellautomation 1766-l32bxb_series_a ≤ 16.000 Yes
Application rockwellautomation 1766-l32bxb_series_b ≤ 16.000 Yes
Application rockwellautomation 1766-l32bxba_series_a ≤ 16.000 Yes
Application rockwellautomation 1766-l32bxba_series_b ≤ 16.000 Yes
Hardware rockwellautomation ab_micrologix_controller 1400 No
References