CVE-2017-16740
Status: ModifiedCritical (10)—
A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.
CVSS
- Version: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Base score: 10
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 7.20%
- Percentile among all scored CVEs: 94
- Score date: 10/11/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (6)
CWEs
- CWE-120
- CWE-119
References
- http://www.securityfocus.com/bid/102474
- https://ics-cert.us-cert.gov/advisories/ICSA-18-009-01
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1070883
- http://www.securityfocus.com/bid/102474
- https://ics-cert.us-cert.gov/advisories/ICSA-18-009-01
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1070883
Raw JSON (NVD)
Show
{
"id": "CVE-2017-16740",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": true,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 10,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "n/a",
"product": "Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers",
"versions": [
{
"status": "affected",
"version": "Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers"
}
]
}
]
}
],
"published": "2018-01-09T21:29:00.420",
"references": [
{
"url": "http://www.securityfocus.com/bid/102474",
"tags": [
"Mitigation",
"Third Party Advisory",
"VDB Entry"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-009-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1070883",
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "http://www.securityfocus.com/bid/102474",
"tags": [
"Mitigation",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-009-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1070883",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution."
},
{
"lang": "es",
"value": "Se ha descubierto un problema de desbordamiento de búfer en Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B y C, en versiones 21.002 y anteriores. Se ha identificado una vulnerabilidad de desbordamiento de búfer basado en pila, lo que podría permitir la ejecución remota de código."
}
],
"lastModified": "2026-06-17T01:09:44.367",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:1766-l32bxba_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E9D1B7A-C310-4E73-884C-F0730294CF01",
"versionEndIncluding": "21.002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:1766-l32bxba:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F03C6CFA-F770-4BCA-BB74-BD0D43C250F7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:1766-l32awa_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FC1BA3D-024D-490D-AFC0-6C5B624AD759",
"versionEndIncluding": "21.002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:1766-l32awa:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5EC2A03F-A665-4874-896C-B603110BADA0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:1766-l32bxb_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B390FC5-BE0C-43B1-BCF3-07A3E98E910D",
"versionEndIncluding": "21.002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:1766-l32bxb:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D3BFF3BE-77D5-4D28-831A-13136D8E0B6D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:1766-l32bwaa_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25407193-4A83-40BD-988A-17A58864D57A",
"versionEndIncluding": "21.002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:1766-l32bwaa:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3250570F-0A69-4484-BD7F-012AC8A2DC7F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:1766-l32awaa_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0C08079-98A4-409D-BBF4-6C47304B3955",
"versionEndIncluding": "21.002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:1766-l32awaa:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "55E42B9C-4D13-48DE-A522-28B1FA1B943E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:1766-l32bwa_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D02BB40-75B6-4AD1-9FA4-1659028BBFE8",
"versionEndIncluding": "21.002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:1766-l32bwa:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BF023FAE-BC4D-4DB7-830E-0A522C8E51CC"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}