What’s Vulnerable › Vulnerabilities

CVE-2017-12090

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-04-05 · updated 2026-06-17
• Weakness: CWE-400

Description

An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a device power cycle resulting in downtime for the device. An attacker can send one packet to trigger this vulnerability.

Affected products

• Rockwellautomation Micrologix 1400 B Firmware: through 21.2

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0442
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0442

Get alerted when CVE-2017-12090 or the next vulnerability affects your stack