CVE-2017-7902
CriticalSummary
A 'Reusing a Nonce, Key Pair in Encryption' issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 programmable logic controllers. Exploiting this vulnerability may allow an attacker to capture and replay a valid request until the nonce is changed.
Risk Assessment
The organization may be exposed to attacks that exploit replay requests, potentially leading to unauthorized access or data manipulation. There is a high risk associated with the security of industrial operations.
Recommendation
It is recommended to update the controllers' firmware to the latest version to eliminate the nonce reuse issue. Additionally, monitoring and analyzing network traffic for potential attack attempts is advised.
Original NVD description (English source)
A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected product reuses nonces, which may allow an attacker to capture and replay a valid request until the nonce is changed.