Login Request a demo
High severity · published Mar 16, 2020
CVE-2020-6988
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and…
7.5
CVSS
4%
EPSS
No
On KEV
Description
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client with used password values to authenticate the user on the client-side. This method of authentication may allow an attacker to bypass authentication altogether, disclose sensitive information, or leak credentials.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M1
Micrologix 1100 Firmware · Rockwellautomation
All versions, or not specified · source: NVD
M1
Micrologix 1400 A Firmware · Rockwellautomation
All versions, or not specified · source: NVD
M1
Micrologix 1400 B Firmware · Rockwellautomation
through 21.001 · source: NVD
R5
Rslogix 500 · Rockwellautomation
through 12.001 · source: NVD
Affected product
M1
Micrologix 1100 Firmware
Rockwellautomation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6988
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6988
Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-070-06
More from Micrologix 1100 Firmware
9.8
CVE-2020-6990
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and…
9.8
CVE-2015-6490
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code…
8.6
CVE-2021-33012
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is…
7.5
CVE-2022-3166
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition
7.5
CVE-2020-6984
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and…