HIGH🇵🇱 Wersja polska

CVE-2017-7914

CVSS 8.6v3.0pub. 2017-06-14upd. 2026-05-13

A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108, 7.00-20130325, 7.00-20130619, 7.00-20140128, 7.00-20140310, 7.00-20140429, 7.00-20140621, 7.00-20140729, 7.00-20141022, 8.00-20140730, and 8.00-20141023. There is no authorization check when connecting to the device, allowing an attacker remote access.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

  • Rockwellautomation Panelview Plus 6 700 1500

    HW
    Rockwellautomation
    wszystkie wersje

  • Rockwellautomation Panelview Plus 6 700 1500 Firmware

    OS
    Rockwellautomation
    6.00.046.00.056.00-201403066.00.426.10.201210126.10-201401227.00-201210127.00-201301087.00-201303257.00-201306197.00-201401287.00-201403107.00-201404297.00-201406217.00-20140729+ 3 więcej
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-20198CRITICAL10.0⚠ KEVten sam vendor

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in...

CVE-2021-22681CRITICAL9.8⚠ KEVten sam vendor

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 ...

CVE-2025-7328CRITICAL9.9PL ✓ten sam vendor

Brak uwierzytelnienia w krytycznych funkcjach Rockwell Automation 1783-NATR

CVE-2025-0477CRITICAL9.3PL ✓ten sam vendor

Słabe szyfrowanie haseł w Rockwell Automation FactoryTalk AssetCentre

CVE-2024-10386CRITICAL9.3PL ✓ten sam vendor

Rockwell Automation ThinManager — brak uwierzytelnienia umożliwia manipulację bazą danych