Vulnerability Spotlight: Rockwell Automation Micro Logix 1400 SNMP Credentials Vulnerability
Summary: Cisco Talos discovered an undocumented SNMP community string, 'wheel', with read/write access on Rockwell Automation MicroLogix 1400 PLCs, alongside the documented 'public' (read) and 'private' (read/write) strings. Because the vendor does not document 'wheel', operators are unlikely to know it exists or to change it before deploying the PLCs, and Talos says the functionality has not been removed from affected devices.
Bottom line: An attacker who reaches the PLC over SNMP can use 'wheel' to change settings or push malicious firmware updates, and most operators will never have rotated a credential they were never told about.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026