CVE-2016-9334

HIGH

Rockwell Automation Allen-Bradley MicroLogix - Info Disclosure

Title source: llm

Description

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. User credentials are sent to the web server in clear text, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.

References (2)

Core 2

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-16-336-06

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/95302

Scores

CVSS v3 7.3

EPSS 0.0006

EPSS Percentile 20.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

Status published

Products (21)

n/a/Rockwell Automation MicroLogix 1100 and 1400 Rockwell Automation MicroLogix 1100 and 1400

rockwellautomation/1763-l16awa_series_a < 14.000

rockwellautomation/1763-l16awa_series_b < 14.000

rockwellautomation/1763-l16bbb_series_a < 14.000

rockwellautomation/1763-l16bbb_series_b < 14.000

rockwellautomation/1763-l16bwa_series_a < 14.000

rockwellautomation/1763-l16bwa_series_b < 14.000

rockwellautomation/1763-l16dwd_series_a < 14.000

rockwellautomation/1763-l16dwd_series_b < 14.000

rockwellautomation/1766-l32awa_series_a < 15.004

... and 11 more

Published Feb 13, 2017

Tracked Since Feb 18, 2026