Rockwellautomation Micrologix_1400_firmware
11 CVEs affecting Rockwellautomation Micrologix_1400_firmware. Latest disclosed: 2022-12-16. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-6490 | Critical | 9.8 | 2015-10-28 | Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execu… |
CVE-2021-22659 | High | 8.6 | 2021-03-25 | Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the a… |
CVE-2018-17924 | High | 8.6 | 2018-12-07 | Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connectio… |
CVE-2022-3166 | High | 7.5 | 2022-12-16 | Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-servic… |
CVE-2021-32926 | High | 7.5 | 2021-06-03 | When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, n… |
CVE-2015-6492 | High | 7.5 | 2015-10-28 | Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corr… |
CVE-2022-46670 | High | 7.1 | 2022-12-16 | Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controll… |
CVE-2022-2179 | Medium | 6.5 | 2022-07-20 | The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clic… |
CVE-2015-6491 | | 2015-10-28 | Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arb… | |
CVE-2015-6488 | | 2015-10-28 | Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 al… | |
CVE-2015-6486 | | 2015-10-28 | SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users… |