TI-2022-02923 Aliases CVE-2022-3166 GHSA-c9wc-p58w-qcgf

MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack

MEDIUM 40CWE-924Published 2022-12-16 · Updated 2025-04-17

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00723 54th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Rockwell	MicroLogix 1100	All	—	No fix listed	CNA
Rockwell	MicroLogix 1400-B/C	up to 21.007	—	No fix listed	CNA
Rockwell	MicroLogix 1400-A	up to 7.000	—	No fix listed	CNA

MicroLogix 1100 VendorRockwell Affected All Fixed in — No fix listed CNA
MicroLogix 1400-B/C VendorRockwell Affected up to 21.007 Fixed in — No fix listed CNA
MicroLogix 1400-A VendorRockwell Affected up to 7.000 Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:-:::::::*	not specified by NVD	Vulnerable	Rockwell
cpe:2.3:h:rockwellautomation:micrologix_1100:-:::::::*	not specified by NVD	Running on	Rockwell
cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:-:::::::*	not specified by NVD	Vulnerable	Rockwell
cpe:2.3:h:rockwellautomation:micrologix_1400:-:::::::*	not specified by NVD	Running on	Rockwell

cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Rockwell
cpe:2.3:h:rockwellautomation:micrologix_1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Rockwell
cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2022-3166
2026-10-03 Alias added: GHSA-c9wc-p58w-qcgf

References

Advisory 1

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137678

TI-2015-05450 Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000… CVSS 3.1CRITICAL 9.8
TI-2020-05638 Hard-coded credentials in Rockwell Automation MicroLogix 1400 Controllers Series B… CVSS 3.1CRITICAL 9.8
TI-2020-05632 Broken or risky cryptographic algorithm in Rockwell Automation MicroLogix 1400… CVSS 3.1CRITICAL 9.8
TI-2021-12619 Improper input validation in Rockwell Automation MicroLogix 1100 CVSS 3.1HIGH 8.6
TI-2015-05452 Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN… CVSS 3.1HIGH 7.5
TI-2020-05636 Improper authentication in Rockwell Automation MicroLogix 1400 Controllers Series B… CVSS 3.1HIGH 7.5

See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences