NVD

Id
88106  
Name
CVE-2017-7901  
Description
A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. Insufficiently random TCP initial sequence numbers are generated, which may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections, resulting in a denial of service for the target device.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:C)  
Pub Date
2017-07-18  
Published
2017-06-29  
Modified Date
2017-07-07  
Seq
2017-7901  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422264 88106 CVE-2016-7054 94238  View
422265 88106 CVE-2016-7054 https://www.openssl.org/news/secadv/20161110.txt  View
430481 88106 CVE-2017-0692 99478  View
430482 88106 CVE-2017-0692 https://source.android.com/security/bulletin/2017-07-01  View
430483 88106 CVE-2017-0692 99478  View
430484 88106 CVE-2017-0692 https://source.android.com/security/bulletin/2017-07-01  View

Related JVN