Security readout for executives and security teams
Plain-English summary
CVE-2017-14466 is a critical access-control flaw in Allen Bradley MicroLogix 1400 Series B firmware. If reachable by an attacker while the controller is in REMOTE or PROG mode, unauthenticated network traffic could read or change sensitive controller data, settings, or ladder logic.
Executive priority
Prioritize discovery and network containment for any affected controllers. The issue can enable unauthenticated modification of industrial control logic, which can create operational, safety, and recovery risk even without confirmed exploitation.
Technical view
The vulnerability affects MicroLogix 1400 Series B FRN 21.2 and before. Talos describes improper file permission behavior where filetype 0x03 permits write access, including overwriting the stored Master Password value. The CVSS 3.0 score is 10.0 with network attack vector, no privileges, and high confidentiality, integrity, and availability impact.
Likely exposure
Exposure is most plausible where affected MicroLogix 1400 Series B controllers are network-reachable from untrusted or insufficiently segmented networks and can enter REMOTE or PROG keyswitch states.
Exploitation context
The source bundle states unauthenticated packets can trigger the issue. It does not provide evidence of active exploitation, and KEV status is false. Treat this as high-risk because compromise could alter operational logic or settings.
Researcher notes
Evidence is limited to the CVE record, CVE List data, and Talos advisory reference. No patch details, exploit-in-the-wild claim, or KEV listing is present in the provided sources. Avoid assuming impact beyond MicroLogix 1400 Series B FRN 21.2 and earlier.
Mitigation direction
- Identify affected MicroLogix 1400 Series B firmware versions in asset inventory.
- Check Allen Bradley vendor guidance for firmware updates or supported remediation.
- Restrict network access to controller management and programming interfaces.
- Limit REMOTE or PROG keyswitch state exposure to controlled maintenance windows.
- Monitor for unexpected setting, password, or ladder logic changes.
Validation and detection
- Confirm model and firmware revision for each MicroLogix 1400 Series B controller.
- Verify whether controllers are reachable from enterprise or vendor-access networks.
- Review operating procedures for REMOTE and PROG keyswitch state usage.
- Check change records for unexpected password, setting, or ladder logic modifications.
- Validate segmentation rules controlling access to affected controllers.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Credential and access behavior lookup
The CVE wording references authentication or credential exposure, so valid-account and credential-access review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2017-14466 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Critical
- CVSS
- 10 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H3.96Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
10CriticalVector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source materials
- CVE List V5 sourceCVE List V5
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0443CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.