HIGH🇵🇱 Wersja polska

CVE-2016-5645

CVSS 7.3v3.0pub. 2016-08-24upd. 2026-06-03

Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

  • Rockwellautomation 1766 L32awa

    HW
    Rockwellautomation
    all versions

  • Rockwellautomation 1766 L32awaa

    HW
    Rockwellautomation
    all versions

  • Rockwellautomation 1766 L32bwa

    HW
    Rockwellautomation
    all versions

  • Rockwellautomation 1766 L32bwaa

    HW
    Rockwellautomation
    all versions

  • Rockwellautomation 1766 L32bxb

    HW
    Rockwellautomation
    all versions

  • Rockwellautomation 1766 L32bxba

    HW
    Rockwellautomation
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-16740CRITICAL10.0PL ✓same product

Buffer overflow w sterownikach Allen-Bradley MicroLogix 1400 umożliwiający RCE

CVE-2023-20198CRITICAL10.0⚠ KEVPL ✓same vendor

Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15

CVE-2021-22681CRITICAL9.8⚠ KEVPL ✓same vendor

Rockwell Automation — pominięcie weryfikacji klucza uwierzytelnienia w sterownikach Logix

CVE-2025-7328CRITICAL9.9PL ✓same vendor

Brak uwierzytelnienia w krytycznych funkcjach Rockwell Automation 1783-NATR

CVE-2025-0477CRITICAL9.3PL ✓same vendor

Słabe szyfrowanie haseł w Rockwell Automation FactoryTalk AssetCentre