{"id":"CVE-2017-7924","aliases":["EUVD-2017-16895","GHSA-ch2w-m37v-83fq"],"status":"published","title":"An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100...","description":"An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.22182,"percentile":0.97689,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2017-09-20T16:00:00Z","modified":"2026-06-17T01:25:29Z","exploits":[{"source":"metasploit","id":"auxiliary/dos/scada/allen_bradley_pccc","title":"DoS Exploitation of Allen-Bradley's Legacy Protocol (PCCC)","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/dos/scada/allen_bradley_pccc"}],"products":[{"vendor":"rockwellautomation","product":"1763-l16awa_firmware"},{"vendor":"rockwellautomation","product":"1763-l16bbb_firmware"},{"vendor":"rockwellautomation","product":"1763-l16bwa_firmware"},{"vendor":"rockwellautomation","product":"1763-l16dwd_firmware"}],"references":[{"url":"http://www.securityfocus.com/bid/99622","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-138-03","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7924"},{"url":"https://github.com/advisories/GHSA-ch2w-m37v-83fq"}],"sources":{"cve":[{"id":"CVE-2017-7924","description":"An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition.","status":"published","published":"2017-09-20T16:00:00Z","modified":"2024-08-05T16:19:29.466Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:20.488433Z"}],"euvd":[{"id":"EUVD-2017-16895","description":"An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition.","status":"published","published":"2017-09-20T16:00:00Z","modified":"2024-08-05T16:19:29Z","updated_at":"2026-11-03T02:39:06.470138Z"}],"ghsa":[{"id":"GHSA-ch2w-m37v-83fq","title":"An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100...","description":"An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition.","status":"published","published":"2022-05-13T01:36:15Z","modified":"2023-02-01T05:08:55Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:50:53.268012Z"}],"nvd":[{"id":"CVE-2017-7924","description":"An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition.","status":"published","published":"2017-09-20T16:29:00.863Z","modified":"2026-06-17T01:25:29.39Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:59.716532Z"}]}}