CVE-2021-33012

Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is switched to RUN mode, which results in a denial-of-service condition. If successfully exploited, this vulnerability will cause the controller to fault whenever the controller is switched to RUN mode.

CVSS v3.1

8.6 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

2.64% chance of exploitation in the next 30 days, 84th percentile

Published

2021-07-09

Updated

2026-06-03

Proof-of-concept exploits (1)

• btaub/industrial1★ · 2026-01-13

References

• CVE Record
• NVD entry

Related

• CVE-2021-3298
• CVE-2021-33026
• CVE-2021-3297
• CVE-2021-33032
• CVE-2021-3294
• CVE-2021-33034