M1
Product
Micrologix 1400 Firmware
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch
Add Micrologix 1400 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-6490 | 9.8 | Oct 28 | Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code… Affected: through 15.002 |
| CVE-2021-22659 | 8.6 | Mar 25 | Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve… Affected: through 21.6 |
| CVE-2018-17924 | 8.6 | Dec 7 | Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an… Affected: All versions, or not specified |
| CVE-2022-3166 | 7.5 | Dec 16 | Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition Affected: All versions, or not specified |
| CVE-2021-32926 | 7.5 | Jun 3 | When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and… Affected: 21.0 and later |
| CVE-2015-6492 | 7.5 | Oct 28 | Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device… Affected: through 15.002 |
| CVE-2022-2179 | 6.5 | Jul 20 | The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks Affected: through 21.007 |
| CVE-2022-46670 | 6.1 | Dec 16 | Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a… Affected: All versions, or not specified |
| CVE-2015-6491 | – | Oct 28 | Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a… Affected: through 15.002 |
| CVE-2015-6488 | – | Oct 28 | Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote… Affected: through 15.002 |
| CVE-2015-6486 | – | Oct 28 | SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute… Affected: through 15.002 |
Showing 11