CVE-2020-6984

HIGH

Rockwell Automation MicroLogix 1400 A/B <21.001, MicroLogix 1100, RSLogix 500 <12.001 - Broken Cryptographic Algorithm

Title source: llm

Description

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://www.us-cert.gov/ics/advisories/icsa-20-070-06

Scores

CVSS v3 7.5

EPSS 0.0275

EPSS Percentile 84.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-327

Status published

Products (5)

None/Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions

rockwellautomation/micrologix_1100_firmware

rockwellautomation/micrologix_1400_a_firmware

rockwellautomation/micrologix_1400_b_firmware < 21.001

rockwellautomation/rslogix_500 < 12.001

Published Mar 16, 2020

Tracked Since Feb 18, 2026