VULNERABILITY INTELLIGENCE

CVE-2016-5645

CVSS score7.3 HIGH
EPSS probability29.61%
CISA KEVNot currently listed
Published2016-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community.

Weakness classification

  • CWE-284: Improper Access Control
  • CWE-798: Use of Hard-coded Credentials

Primary references