Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.
References
| Link | Resource |
|---|---|
| https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
07 Nov 2023, 03:55
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website. |
22 Dec 2022, 18:28
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CPE | cpe:2.3:h:rockwellautomation:micrologix_1100:-:*:*:*:*:*:*:* cpe:2.3:h:rockwellautomation:micrologix_1400-a:-:*:*:*:*:*:*:* cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:* cpe:2.3:o:rockwellautomation:micrologix_1400-c_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:rockwellautomation:micrologix_1400-c:-:*:*:*:*:*:*:* cpe:2.3:o:rockwellautomation:micrologix_1400-a_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:rockwellautomation:micrologix_1400-b_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:rockwellautomation:micrologix_1400-b:-:*:*:*:*:*:*:* |
|
| References | (MISC) https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679 - Vendor Advisory | |
| CWE | CWE-79 | |
| First Time |
Rockwellautomation micrologix 1100 Firmware
Rockwellautomation micrologix 1400 Firmware Rockwellautomation micrologix 1400-c Rockwellautomation micrologix 1400-b Rockwellautomation micrologix 1400-a Firmware Rockwellautomation micrologix 1400 Rockwellautomation Rockwellautomation micrologix 1400-b Firmware Rockwellautomation micrologix 1400-c Firmware Rockwellautomation micrologix 1100 Rockwellautomation micrologix 1400-a |
16 Dec 2022, 22:03
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-12-16 21:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-46670
Mitre link : CVE-2022-46670
CVE.ORG link : CVE-2022-46670
JSON object : View
Products Affected
rockwellautomation
- micrologix_1400-c
- micrologix_1400-a_firmware
- micrologix_1400-b
- micrologix_1400-c_firmware
- micrologix_1100_firmware
- micrologix_1400-a
- micrologix_1400_firmware
- micrologix_1100
- micrologix_1400-b_firmware
- micrologix_1400
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')