CVE-2017-7902: Rockwellautomation 1763-l16awa Series A

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected product reuses nonces, which may allow an attacker to capture and replay a valid request until the nonce is changed.

Affected products

• Rockwellautomation 1763-l16awa Series A: up to and including 16.000
• Rockwellautomation 1763-l16awa Series B: up to and including 16.000
• Rockwellautomation 1763-l16bbb Series A: up to and including 16.000
• Rockwellautomation 1763-l16bbb Series B: up to and including 16.000
• Rockwellautomation 1763-l16bwa Series A: up to and including 16.000
• Rockwellautomation 1763-l16bwa Series B: up to and including 16.000
• Rockwellautomation 1763-l16dwd Series A: up to and including 16.000
• Rockwellautomation 1763-l16dwd Series B: up to and including 16.000
• Rockwellautomation 1766-l32awa Series A: up to and including 16.000
• Rockwellautomation 1766-l32awa Series B: up to and including 16.000
• Rockwellautomation 1766-l32awaa Series A: up to and including 16.000
• Rockwellautomation 1766-l32awaa Series B: up to and including 16.000
• Rockwellautomation 1766-l32bwa Series A: up to and including 16.000
• Rockwellautomation 1766-l32bwa Series B: up to and including 16.000
• Rockwellautomation 1766-l32bwaa Series A: up to and including 16.000
• Rockwellautomation 1766-l32bwaa Series B: up to and including 16.000
• Rockwellautomation 1766-l32bxb Series A: up to and including 16.000
• Rockwellautomation 1766-l32bxb Series B: up to and including 16.000
• Rockwellautomation 1766-l32bxba Series A: up to and including 16.000
• Rockwellautomation 1766-l32bxba Series B: up to and including 16.000

Published 2017-06-30. Last modified 2026-06-17.