CVE-2018-17924: rockwellautomation 1756-en2f_series_a_firmware

Vulnerability summary

CVE-2018-17924 is a high (CVSS 8.6) vulnerability in rockwellautomation 1756-en2f_series_a_firmware. EPSS estimates a 4.33% chance of exploitation in the next 30 days, higher than 91.1% of scored vulnerabilities.

Timeline

1. 07-12-2018
   PublishedVulnerability first disclosed.
2. 03-06-2026
   Last modifiedVulnerability information updated.

Description

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller in the system is set to Hard RUN mode. When the affected device accepts this new IP configuration, a loss of communication occurs between the device and the rest of the system as the system traffic is still attempting to communicate with the device via the overwritten IP address.

• CWE-306Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.