Read the docs

Rockwell

Records435All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical95CVSS 9.0–10.0
CVSS high280CVSS 7.0–8.9

Exploited now

Rockwell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Micrologix 1400 Firmware · all components

Priority MEDIUM 52

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connecti…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.05845 Published 2018-12-07 No fix listed CWE-306
Priority MEDIUM 47

Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01795 Published 2021-03-25 No fix listed CWE-120
Priority LOW 36

SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04292 Published 2015-10-28 No fix listed CWE-89
Priority LOW 32

Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the abil…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00582 Published 2022-12-16 No fix listed CWE-79
Open these records in search →