CVE-2017-16740

CVE Enrichment

CVSS: 10.0 CRITICAL
EPSS: 7.20%
EPSS Percentile: 94.26%
CISA KEV: Not listed

Description

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.

Technical Details

CVSS Version: 3.0
CNA / NVD Source: [email protected]
Published: 10-Jan-2018 04:29
Last Modified: 17-Jun-2026 08:09
EPSS Date: 2026-10-25
CWE: CWE-120, CWE-119

CVSS Vector


            CVSS:3.0                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

rockwellautomation / 1766-l32bxba_firmware Source: NVD CPE · affected
Version / affected range: * · through (inclusive) 21.002
cpe:2.3:o:rockwellautomation:1766-l32bxba_firmware:*:*:*:*:*:*:*:*
rockwellautomation / 1766-l32awa_firmware Source: NVD CPE · affected
Version / affected range: * · through (inclusive) 21.002
cpe:2.3:o:rockwellautomation:1766-l32awa_firmware:*:*:*:*:*:*:*:*
rockwellautomation / 1766-l32bxb_firmware Source: NVD CPE · affected
Version / affected range: * · through (inclusive) 21.002
cpe:2.3:o:rockwellautomation:1766-l32bxb_firmware:*:*:*:*:*:*:*:*
rockwellautomation / 1766-l32bwaa_firmware Source: NVD CPE · affected
Version / affected range: * · through (inclusive) 21.002
cpe:2.3:o:rockwellautomation:1766-l32bwaa_firmware:*:*:*:*:*:*:*:*
rockwellautomation / 1766-l32awaa_firmware Source: NVD CPE · affected
Version / affected range: * · through (inclusive) 21.002
cpe:2.3:o:rockwellautomation:1766-l32awaa_firmware:*:*:*:*:*:*:*:*
rockwellautomation / 1766-l32bwa_firmware Source: NVD CPE · affected
Version / affected range: * · through (inclusive) 21.002
cpe:2.3:o:rockwellautomation:1766-l32bwa_firmware:*:*:*:*:*:*:*:*

References

Last enrichment sync: 03-Nov-2026 05:22
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

The research highlights ongoing risks from public-facing EtherNet/IP devices, stale remote-access services, and possible exposure to CVE-2017-16740 on some MicroLogix 1400 systems. Forescout Finds 4,000+ Exposed Rockwell Controllers, Including 22 in Attack-Affected Cities

People (1)

Vendors (1)

Products (4)

Tools (1)

Industries (1)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.