CVE-2017-7901

A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. Insufficiently random TCP initial sequence numbers are generated, which may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections, resulting in a denial of service for the target device.

• CWE-343
• CWE-330

• http://www.securitytracker.com/id/1038546
• https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04Patch, Third Party Advisory, US Government Resource
• http://www.securitytracker.com/id/1038546
• https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04Patch, Third Party Advisory, US Government Resource

Published

Jun 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7894WinDjView 2.1 might allow user-assisted attackers to execute…
• CVE-2017-7895The NFSv2 and NFSv3 server implementations in the Linux kern…9.8
• CVE-2017-7896Trend Micro InterScan Messaging Security Virtual Appliance (…
• CVE-2017-7897A cross-site scripting (XSS) vulnerability in the MantisBT (…
• CVE-2017-7898An Improper Restriction of Excessive Authentication Attempts…9.8
• CVE-2017-7899An Information Exposure issue was discovered in Rockwell Aut…
• CVE-2017-7902A "Reusing a Nonce, Key Pair in Encryption" issue was discov…
• CVE-2017-7903A Weak Password Requirements issue was discovered in Rockwel…9.8
• CVE-2017-7905A Weak Cryptography for Passwords issue was discovered in Ge…
• CVE-2017-7906In ABB IP GATEWAY 3.39 and prior, the web server does not su…
• CVE-2017-7907An Improper XML Parser Configuration issue was discovered in…
• CVE-2017-7908A heap-based buffer overflow exists in the third-party produ…