Sign-up

ID

VAR-201706-0662


CVE

CVE-2017-7914


TITLE

Rockwell Automation PanelView Plus Security Bypass Vulnerability

Trust: 0.8

sources: IVD: b3d00c52-ffd5-41e3-accf-240483c08e12 // CNVD: CNVD-2017-15839

DESCRIPTION

A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108, 7.00-20130325, 7.00-20130619, 7.00-20140128, 7.00-20140310, 7.00-20140429, 7.00-20140621, 7.00-20140729, 7.00-20141022, 8.00-20140730, and 8.00-20141023. There is no authorization check when connecting to the device, allowing an attacker remote access. A security vulnerability exists in Rockwell Automation PanelView Plus 6 700-1500 that caused the program to fail to perform authentication detection. The following versions are affected: Rockwell Automation PanelView Plus 6 700-1500 Version 6.00.04, Version 6.00.05, Version 6.00.42, Version 6.00-20140306, Version 6.10.20121012, Version 6.10-20140122, Version 7.00-20121012, Version 7.00- Vers, 7.00-20130325 version, 7.00-20130619 version, 7.00-20140128 version, 7.00-20140310 version, 7.00-20140429 version, 7.00-20140729 version, 7.00-20140729, 7.00-20140621 version, 7.00-20141022, 8.00-00. 20141023 version

Trust: 2.7

sources: NVD: CVE-2017-7914 // JVNDB: JVNDB-2017-005222 // CNVD: CNVD-2017-15839 // BID: 99069 // IVD: b3d00c52-ffd5-41e3-accf-240483c08e12 // VULHUB: VHN-116117

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: b3d00c52-ffd5-41e3-accf-240483c08e12 // CNVD: CNVD-2017-15839

AFFECTED PRODUCTS

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:6.10-20140122

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:6.00-20140306

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140729

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20130108

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:6.00.42

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:6.00.05

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:6.10.20121012

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20121012

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:6.00.04

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20141022

Trust: 1.6

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140621

Trust: 1.0

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:8.00-20140730

Trust: 1.0

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:8.00-20141023

Trust: 1.0

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140128

Trust: 1.0

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140429

Trust: 1.0

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140310

Trust: 1.0

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20130619

Trust: 1.0

vendor:rockwellautomationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20130325

Trust: 1.0

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:6.00-20140306

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:6.00.04

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:6.00.05

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:6.00.42

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:6.10-20140122

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:6.10.20121012

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20121012

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20130108

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20130325

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20130619

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140128

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140310

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140429

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140621

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20140729

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:7.00-20141022

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:8.00-20140730

Trust: 0.8

vendor:rockwell automationmodel:panelview plus 6 700-1500scope:eqversion:8.00-20141023

Trust: 0.8

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-1500

Trust: 0.6

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15006.10.20121012

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15006.0.42

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15006.0.5

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15006.0.4

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15008.00-20141023

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15008.00-20140730

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20141022

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20140729

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20140621

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20140429

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20140310

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20140128

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20130619

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20130325

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20130108

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15007.00-20121012

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15006.10-20140122

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:eqversion:6700-15006.00-20140306

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:neversion:6700-15008.00-20160418

Trust: 0.3

vendor:rockwellmodel:automation panelview plusscope:neversion:6700-15007.00-20150209

Trust: 0.3

vendor:panelview plus 6 700 1500model: - scope:eqversion:6.00-20140306

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:6.00.04

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:6.00.05

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:6.00.42

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:6.10-20140122

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:6.10.20121012

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20121012

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20130108

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20130325

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20130619

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20140128

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20140310

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20140429

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20140621

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20140729

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:7.00-20141022

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:8.00-20140730

Trust: 0.2

vendor:panelview plus 6 700 1500model: - scope:eqversion:8.00-20141023

Trust: 0.2

sources: IVD: b3d00c52-ffd5-41e3-accf-240483c08e12 // CNVD: CNVD-2017-15839 // BID: 99069 // JVNDB: JVNDB-2017-005222 // CNNVD: CNNVD-201706-598 // NVD: CVE-2017-7914

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2017-7914
value: HIGH

Trust: 1.0

NVD: CVE-2017-7914
value: HIGH

Trust: 0.8

CNVD: CNVD-2017-15839
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201706-598
value: HIGH

Trust: 0.6

IVD: b3d00c52-ffd5-41e3-accf-240483c08e12
value: HIGH

Trust: 0.2

VULHUB: VHN-116117
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2017-7914
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2017-15839
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

IVD: b3d00c52-ffd5-41e3-accf-240483c08e12
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-116117
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2017-7914
baseSeverity: HIGH
baseScore: 8.6
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 4.7
version: 3.0

Trust: 1.8

sources: IVD: b3d00c52-ffd5-41e3-accf-240483c08e12 // CNVD: CNVD-2017-15839 // VULHUB: VHN-116117 // JVNDB: JVNDB-2017-005222 // CNNVD: CNNVD-201706-598 // NVD: CVE-2017-7914

PROBLEMTYPE DATA

problemtype:CWE-862

Trust: 1.1

problemtype:CWE-882

Trust: 1.0

problemtype:CWE-285

Trust: 0.9

sources: VULHUB: VHN-116117 // JVNDB: JVNDB-2017-005222 // NVD: CVE-2017-7914

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201706-598

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201706-598

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2017-005222

PATCH
title:PanelView Plus 6 Graphic Terminalsurl:http://ab.rockwellautomation.com/graphic-terminals/2711p-panelview-plus-6-terminals
Trust: 0.8
title:Rockwell Automation PanelView Plus security bypass vulnerability patchurl:https://www.cnvd.org.cn/patchInfo/show/98491
Trust: 0.6
title:Rockwell Automation PanelView Plus Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=71488
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2017-15839 // 
            
            
            
            JVNDB: JVNDB-2017-005222 // 
            
            
            
            CNNVD: CNNVD-201706-598

EXTERNAL IDS
db:NVDid:CVE-2017-7914
Trust: 3.6
db:ICS CERTid:ICSA-17-157-01
Trust: 2.8
db:BIDid:99069
Trust: 1.0
db:CNNVDid:CNNVD-201706-598
Trust: 0.9
db:CNVDid:CNVD-2017-15839
Trust: 0.8
db:JVNDBid:JVNDB-2017-005222
Trust: 0.8
db:IVDid:B3D00C52-FFD5-41E3-ACCF-240483C08E12
Trust: 0.2
db:VULHUBid:VHN-116117
Trust: 0.1
sources:
            
            
            IVD: b3d00c52-ffd5-41e3-accf-240483c08e12 // 
            
            
            
            CNVD: CNVD-2017-15839 // 
            
            
            
            VULHUB: VHN-116117 // 
            
            
            
            BID: 99069 // 
            
            
            
            JVNDB: JVNDB-2017-005222 // 
            
            
            
            CNNVD: CNNVD-201706-598 // 
            
            
            
            NVD: CVE-2017-7914

REFERENCES
url:https://ics-cert.us-cert.gov/advisories/icsa-17-157-01
Trust: 2.8
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-7914
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2017-7914
Trust: 0.8
url:http://www.securityfocus.com/bid/99069
Trust: 0.6
url:http://www.rockwellautomation.com/
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2017-15839 // 
            
            
            
            VULHUB: VHN-116117 // 
            
            
            
            BID: 99069 // 
            
            
            
            JVNDB: JVNDB-2017-005222 // 
            
            
            
            CNNVD: CNNVD-201706-598 // 
            
            
            
            NVD: CVE-2017-7914

CREDITS
The vendor reported this issue.
Trust: 0.3
sources:
            
            
            BID: 99069

SOURCES
db:IVDid:b3d00c52-ffd5-41e3-accf-240483c08e12
db:CNVDid:CNVD-2017-15839
db:VULHUBid:VHN-116117
db:BIDid:99069
db:JVNDBid:JVNDB-2017-005222
db:CNNVDid:CNNVD-201706-598
db:NVDid:CVE-2017-7914

LAST UPDATE DATE
2025-04-20T23:40:04.447000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2017-15839date:2017-07-21T00:00:00
db:VULHUBid:VHN-116117date:2019-10-09T00:00:00
db:BIDid:99069date:2017-06-06T00:00:00
db:JVNDBid:JVNDB-2017-005222date:2017-07-21T00:00:00
db:CNNVDid:CNNVD-201706-598date:2019-10-17T00:00:00
db:NVDid:CVE-2017-7914date:2025-04-20T01:37:25.860

SOURCES RELEASE DATE
db:IVDid:b3d00c52-ffd5-41e3-accf-240483c08e12date:2017-07-21T00:00:00
db:CNVDid:CNVD-2017-15839date:2017-07-21T00:00:00
db:VULHUBid:VHN-116117date:2017-06-14T00:00:00
db:BIDid:99069date:2017-06-06T00:00:00
db:JVNDBid:JVNDB-2017-005222date:2017-07-21T00:00:00
db:CNNVDid:CNNVD-201706-598date:2017-06-14T00:00:00
db:NVDid:CVE-2017-7914date:2017-06-14T21:29:00.270