Login Request a demo
Medium severity · published Dec 16, 2022
CVE-2022-46670
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a…
6.1
CVSS
0.6%
EPSS
No
On KEV
Description
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution.  The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M1
Micrologix 1100 Firmware · Rockwellautomation
All versions, or not specified · source: NVD
M1
Micrologix 1400 Firmware · Rockwellautomation
All versions, or not specified · source: NVD
M1
Micrologix 1400-a Firmware · Rockwellautomation
through 7.000 · source: NVD
M1
Micrologix 1400-b Firmware · Rockwellautomation
through 21.007 · source: NVD
M1
Micrologix 1400-c Firmware · Rockwellautomation
through 21.007 · source: NVD
Affected product
M1
Micrologix 1100 Firmware
Rockwellautomation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-46670
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-46670
Vendor Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679
More from Micrologix 1100 Firmware
9.8
CVE-2020-6990
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and…
9.8
CVE-2015-6490
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code…
8.6
CVE-2021-33012
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is…
7.5
CVE-2022-3166
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition
7.5
CVE-2020-6988
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and…