CVE Feed

    Dashboard / CVE / CVE-2016-9334

    CVE-2016-9334

    An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. User credentials are sent to the web server in clear text, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.

    Published:Feb 13, 2017
    Last Modified:Apr 20, 2025
    EPS:Feb 13, 2017
    EPSS Score:0.00065
    CVSS Score:7.3

    Affected Products

    Vendor
    Rockwellautomation
    Product
    1763-l16awa Series A
    Vendor
    Rockwellautomation
    Product
    1763-l16awa Series B
    Vendor
    Rockwellautomation
    Product
    1763-l16bbb Series A
    Vendor
    Rockwellautomation
    Product
    1763-l16bbb Series B
    Vendor
    Rockwellautomation
    Product
    1763-l16bwa Series A
    Vendor
    Rockwellautomation
    Product
    1763-l16bwa Series B
    Vendor
    Rockwellautomation
    Product
    1763-l16dwd Series A
    Vendor
    Rockwellautomation
    Product
    1763-l16dwd Series B
    Vendor
    Rockwellautomation
    Product
    1766-l32awa Series A
    Vendor
    Rockwellautomation
    Product
    1766-l32awa Series B
    Vendor
    Rockwellautomation
    Product
    1766-l32awaa Series A
    Vendor
    Rockwellautomation
    Product
    1766-l32awaa Series B
    Vendor
    Rockwellautomation
    Product
    1766-l32bwa Series A
    Vendor
    Rockwellautomation
    Product
    1766-l32bwa Series B
    Vendor
    Rockwellautomation
    Product
    1766-l32bwaa Series A
    Vendor
    Rockwellautomation
    Product
    1766-l32bwaa Series B
    Vendor
    Rockwellautomation
    Product
    1766-l32bxb Series A
    Vendor
    Rockwellautomation
    Product
    1766-l32bxb Series B
    Vendor
    Rockwellautomation
    Product
    1766-l32bxba Series A
    Vendor
    Rockwellautomation
    Product
    1766-l32bxba Series B

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-7898 (CVSS 9.8) — An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen…
    CVE-2017-7899 (CVSS 9.8) — An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable…
    CVE-2017-7902 (CVSS 9.8) — A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLog…
    CVE-2017-7903 (CVSS 9.8) — A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 program…
    CVE-2017-7901 (CVSS 8.6) — A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley Micro…
    CVE-2016-9338 (CVSS 2.7) — An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A …
    CVE-2016-0868 (CVSS 9.8) — Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High