CVE-2016-9334
Estado: ModificadaAlta (7.3)—
An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. User credentials are sent to the web server in clear text, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Puntuación base: 7.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.06%
- Percentil entre todas las CVEs puntuadas: 90
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (20)
Rockwellautomation — 1763-l16awa Series ARockwellautomation — 1763-l16awa Series BRockwellautomation — 1763-l16bbb Series ARockwellautomation — 1763-l16bbb Series BRockwellautomation — 1763-l16bwa Series ARockwellautomation — 1763-l16bwa Series BRockwellautomation — 1763-l16dwd Series ARockwellautomation — 1763-l16dwd Series BRockwellautomation — 1766-l32awa Series ARockwellautomation — 1766-l32awa Series BRockwellautomation — 1766-l32awaa Series ARockwellautomation — 1766-l32awaa Series BRockwellautomation — 1766-l32bwa Series ARockwellautomation — 1766-l32bwa Series BRockwellautomation — 1766-l32bwaa Series ARockwellautomation — 1766-l32bwaa Series BRockwellautomation — 1766-l32bxb Series ARockwellautomation — 1766-l32bxb Series BRockwellautomation — 1766-l32bxba Series ARockwellautomation — 1766-l32bxba Series B
CWE
- NVD-CWE-Other
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-9334",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 7.3,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 3.4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "n/a",
"product": "Rockwell Automation MicroLogix 1100 and 1400",
"versions": [
{
"status": "affected",
"version": "Rockwell Automation MicroLogix 1100 and 1400"
}
]
}
]
}
],
"published": "2017-02-13T21:59:01.580",
"references": [
{
"url": "http://www.securityfocus.com/bid/95302",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-336-06",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "http://www.securityfocus.com/bid/95302",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-336-06",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. User credentials are sent to the web server in clear text, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server."
},
{
"lang": "es",
"value": "Ha sido descubierto un problema en controlador Rockwell Automation Allen-Bradley MicroLogix 1100, 1763-L16AWA, 1763-L16AWA, Series A y B, Versión 14.000 y versiones anteriores; 1763-L16BBB, Series A y B, Versión 14.000 y versiones anteriores; 1763-L16BWA, Series A y B, Versión 14.000 y versiones anteriores; y 1763-L16DWD, Series A y B, Versión 14.000 y versiones anteriores. Las credenciales de usuario son enviadas al servidor web en texto plano, lo que puede permitir a un atacante descubrir las credenciales si son capaces de observar el tráfico entre el navegador web y el servidor."
}
],
"lastModified": "2026-06-17T00:55:50.513",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rockwellautomation:1763-l16awa_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7434A56-A11C-4362-A806-ECC05EF81EDC",
"versionEndIncluding": "14.000"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1763-l16awa_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E55698D3-601A-48E4-AD5A-C42AA32A02DC",
"versionEndIncluding": "14.000"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FBC09CC-AD8C-4412-90B0-1E798B56C4F7",
"versionEndIncluding": "14.000"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1763-l16bbb_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58265FCD-55B4-4E9C-8A02-9702B8ED5E4C",
"versionEndIncluding": "14.000"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A719DAFD-8BA2-4E56-AC78-60C2D9FCBAA0",
"versionEndIncluding": "14.000"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1763-l16bwa_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "530BB796-C178-49C1-ADF7-7B34E9FD6ED8",
"versionEndIncluding": "14.000"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6D6A13D-69AC-431B-9E12-BDB6523BB49D",
"versionEndIncluding": "14.000"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1763-l16dwd_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D38291EC-779A-461C-971B-09A52C2FB668",
"versionEndIncluding": "14.000"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32awa_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44A021E4-B93B-4AA0-B7E7-A69F86666D24",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32awa_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCE93E4A-C845-4B29-B09E-DA5EC4F22EC2",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE5F717B-487B-473F-BD50-0DE76CAFD6B7",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32awaa_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEB0FCA4-C3D7-46CC-9D4A-C7FE8B7D25C4",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55708721-9FAF-4778-95AE-C51FAF42E234",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32bwa_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E6A9C27-E079-43CD-A348-C257AD1B2C9B",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2830F25-7489-4B96-8750-8E187BA155A8",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32bwaa_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "391B81A5-A3BB-44FD-9849-2D9FC0A004EE",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AACFCF1B-5FD4-451E-94F9-FFE6CA3427DB",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32bxb_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31BCB97C-9F7C-47C7-832E-2EAA7B841CA2",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93282079-80A2-4CDF-9EF8-D9EEBAC1D238",
"versionEndIncluding": "15.004"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:1766-l32bxba_series_b:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4F5D81D-62BA-4655-8FB1-43BC0FF3288B",
"versionEndIncluding": "15.004"
}
],
"operator": "OR"
}
]
}
],
"evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/319.html\">CWE-319: Cleartext Transmission of Sensitive Information</a>",
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}