Is CVE-2017-12093 actively exploited?

No active exploitation of CVE-2017-12093 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2017-12093 be exploited remotely?

Yes. CVE-2017-12093 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2017-12093?

CVE-2017-12093 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2017-12093

MEDIUM

CVE-2017-12093

CWE-400Published: April 5, 2018· Updated: Jun 17, 2026

5.3

CVSS v3.1

Official Description

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to the PLC being disconnected. An attacker can send unauthenticated packets to trigger this vulnerability.

NVD Source

Technical Analysis

CVE-2017-12093 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.