CVE-2017-7914
Last modified
CVE-2017-7914 is a vulnerability of currently unknown severity. A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108, 7.00-20130325, 7.00-20130619, 7.00-20140128, 7.00-20140310, 7.00-20140429, 7.00-20140621, 7.00-20140729, 7.00-20141022, 8.00-20140730, and 8.00-20141023. There is no authorization check when connecting to the device, allowing an attacker remote access.. EPSS estimates a 6.56% chance of exploitation in the next 30 days.
Description
A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108, 7.00-20130325, 7.00-20130619, 7.00-20140128, 7.00-20140310, 7.00-20140429, 7.00-20140621, 7.00-20140729, 7.00-20141022, 8.00-20140730, and 8.00-20141023. There is no authorization check when connecting to the device, allowing an attacker remote access.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 6.00-20140306 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 6.00.04 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 6.00.05 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 6.00.42 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 6.10-20140122 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 6.10.20121012 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20121012 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20130108 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20130325 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20130619 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20140128 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20140310 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20140429 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20140621 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20140729 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 7.00-20141022 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 8.00-20140730 |
| Rockwellautomation | Panelview Plus 6 700-1500 Firmware | 8.00-20141023 |
References
- https://ics-cert.us-cert.gov/advisories/ICSA-17-157-01Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-17-157-01Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-7914?
How severe is CVE-2017-7914?
How do I fix CVE-2017-7914?
Are you affected by CVE-2017-7914?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
