CVE-2016-9334

Severity: high (CVSS 7.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-02-13 · updated 2026-06-17

Description

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. User credentials are sent to the web server in clear text, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.

Affected products

Rockwellautomation 1763-L16Awa Series A: through 14.000
Rockwellautomation 1763-L16Awa Series B: through 14.000
Rockwellautomation 1763-L16Bbb Series A: through 14.000
Rockwellautomation 1763-L16Bbb Series B: through 14.000
Rockwellautomation 1763-L16Bwa Series A: through 14.000
Rockwellautomation 1763-L16Bwa Series B: through 14.000
Rockwellautomation 1763-L16Dwd Series A: through 14.000
Rockwellautomation 1763-L16Dwd Series B: through 14.000
Rockwellautomation 1766-L32Awa Series A: through 15.004
Rockwellautomation 1766-L32Awa Series B: through 15.004
Rockwellautomation 1766-L32Awaa Series A: through 15.004
Rockwellautomation 1766-L32Awaa Series B: through 15.004
Rockwellautomation 1766-L32Bwa Series A: through 15.004
Rockwellautomation 1766-L32Bwa Series B: through 15.004
Rockwellautomation 1766-L32Bwaa Series A: through 15.004
Rockwellautomation 1766-L32Bwaa Series B: through 15.004
Rockwellautomation 1766-L32Bxb Series A: through 15.004
Rockwellautomation 1766-L32Bxb Series B: through 15.004
Rockwellautomation 1766-L32Bxba Series A: through 15.004
Rockwellautomation 1766-L32Bxba Series B: through 15.004

References

Get alerted when CVE-2016-9334 or the next vulnerability affects your stack