Rockwell Automation MicroLogix Controllers and RSLogix 500 Software

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain access to sensitive project file information including passwords.

CVEs (4)

Remediations

• For MicroLogix 1400 series B controllers, Rockwell recommends affected users apply FRN 21.002 or later for MicroLogix 1400 Series B devices and use the enhanced password security feature.
• Rockwell Automation reports that there are currently no mitigations for MicroLogix 1400 series A controllers or MicroLogix 1100 controllers.
• For RSLogix 500 software, Rockwell Automation recommends affected users apply v11 or later and use in conjunction with applied FRN 21.001 or later for Micrologix 1400 Series B devices. Other configurations do not have direct mitigations.

Affected Vendors

Affected Products (4)

Affected Sectors

Multiple