NVD disclosure day
CVE-2017-7903
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Rockwell Automation's Allen-Bradley MicroLogix programmable logic controllers are affected by weak password requirements due to short, numeric passwords. This vulnerability may allow unauthorized access, potentially leading to operational disruptions and business risk.
CVE-2017-7898
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Rockwell Automation Allen-Bradley MicroLogix controllers are affected by a vulnerability allowing unlimited incorrect password attempts. This could permit unauthorized access to operational systems and data, posing a business risk.
CVE-2017-6034
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An authentication bypass vulnerability exists in Schneider Electric Modicon Modbus protocol. Attackers can replay captured commands, potentially affecting industrial control systems and business continuity.