Read the docs
TI-2014-04410 Aliases CVE-2014-5410GHSA-h68h-cg6m-r2p3

Rockwell Automation Micrologix 1400 Improper Input Validation

Priority LOW 38CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · CNA. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption) via malformed packets over (1) an Ethernet network or (2) a serial line.

Why it matters now

EPSS 0.04171 90th percentileScored 2026-11-07
Fix Fixed Allen-Bradley MicroLogix 1400 (Rockwell Automation): Series B FRN 15.001 or higher

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellAllen-Bradley MicroLogix 1400up to 1766-Lxxxxx Series A FRN 7; up to 1766-Lxxxxx Series B FRN 15.000Series B FRN 15.001 or higherPatch availableCNA
  • Allen-Bradley MicroLogix 1400 VendorRockwell Affected up to 1766-Lxxxxx Series A FRN 7; up to 1766-Lxxxxx Series B FRN 15.000 Fixed in Series B FRN 15.001 or higher Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1400:*:*:*:*:*:*:*1400VulnerableRockwell
  • cpe:2.3:h:rockwellautomation:ab_micrologix_controller:1400:*:*:*:*:*:*:* Versions 1400 Vulnerable ·Rockwell

Remediation

  • Fix · CNA Allen-Bradley MicroLogix 1400 (Rockwell Automation) Fixed in Series B FRN 15.001 or higher

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-5410
  2. 2026-10-03 Alias added: GHSA-h68h-cg6m-r2p3

References

Advisory 1

Other 3

  • TI-2012-03998 Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC… CVSS 2.0HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences