Vulnerability Spotlight: Multiple Vulnerabilities in Allen Bradley Micro Logix 1400 Series Devices
Summary: Cisco Talos researchers Jared Rittle and Patrick DeSantis found six vulnerabilities in Rockwell Automation Allen-Bradley MicroLogix 1400 Series B PLCs, affecting firmware versions FRN 21.003, 21.002, 21.0 and 15. The flaws let unauthenticated attackers, or in one case an authenticated one, power cycle devices into a fault state, delete ladder logic, read and write files including the device master password, write to the memory module, and exhaust the ten-connection session pool.
Why it matters: These PLCs run critical process control in industrial settings, and several of the flaws need no credentials at all - one packet can wipe stored ladder logic and force a fault state, and disabling EtherNet/IP does not mitigate it.
Read the original at Cisco Talos ↗
- Topics
- OT / ICS & Critical Infrastructure
- Mentions
- CVE-2017-12088CVE-2017-12089CVE-2017-12090
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026