CVE-2016-5645

high · 7.3

Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community.

7.3

CVSS

29.6%

EPSS (exploit prob.)

98th

EPSS percentile

2016-08-24

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-284CWE-798

Affected products

Vendor	Product	Affected versions
rockwellautomation	1766-l32awa	all versions
rockwellautomation	1766-l32awaa	all versions
rockwellautomation	1766-l32bwa	all versions
rockwellautomation	1766-l32bwaa	all versions
rockwellautomation	1766-l32bxb	all versions
rockwellautomation	1766-l32bxba	all versions

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/92428
https://ics-cert.us-cert.gov/advisories/ICSA-16-224-01
http://www.securityfocus.com/bid/92428
https://ics-cert.us-cert.gov/advisories/ICSA-16-224-01

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-5645