CVE-2021-22659

Katalog CVE

CVSS 8.6 · High EPSS 1,7%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada rockwellautomation micrologix 1400 firmware. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a denial-of-service condition. The FAULT LED will flash RED and communications may be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user.

Rincian

Terbit di NVD

25 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 77,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1129877/loc/en_US#__highlight permissions required · advisory vendor
• https://us-cert.cisa.gov/ics/advisories/icsa-21-033-01 advisory pihak ketiga · pemerintah AS