CVE-2021-32926: rockwellautomation micrologix_1400_firmware Channel Accessible by Non-Endpoint
Vulnerability summary
CVE-2021-32926 is a high (CVSS 7.5) Channel Accessible by Non-Endpoint vulnerability in rockwellautomation micrologix_1400_firmware. EPSS estimates a 2.98% chance of exploitation in the next 30 days, higher than 87.1% of scored vulnerabilities.
Timeline
- 03-06-2021PublishedVulnerability first disclosed.
- 04-06-2026Last modifiedVulnerability information updated.
Description
When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an illegitimate hash. The user would no longer be able to authenticate to the controller (Micro800: All versions, MicroLogix 1400: Version 21 and later) causing a denial-of-service condition
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
2.98%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.98% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Rockwellautomation1 product
- micrologix_1400_firmware≥ 21.0 (No fix recorded)
1 vendor · 1 product
References
1 links
us-cert.cisa.gov/ics/advisories/icsa-21-145-02X Refsource MISCThird Party AdvisoryUS Government Resource