Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack
Priority LOW 32CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.
Summary
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00582 48th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Rockwell | MicroLogix 1100 & 1400 Controllers | All | — | No fix listed | CNA |
| Rockwell | MicroLogix 1400-B/C | up to 21.007 | — | No fix listed | CNA |
| Rockwell | MicroLogix 1400-A | up to 7.000 | — | No fix listed | CNA |
- MicroLogix 1100 & 1400 Controllers VendorRockwell Affected All Fixed in — No fix listed CNA
- MicroLogix 1400-B/C VendorRockwell Affected up to 21.007 Fixed in — No fix listed CNA
- MicroLogix 1400-A VendorRockwell Affected up to 7.000 Fixed in — No fix listed CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Rockwell |
| cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Rockwell |
| cpe:2.3:h:rockwellautomation:micrologix_1100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:o:rockwellautomation:micrologix_1400-b_firmware:*:*:*:*:*:*:*:* | up to 21.007 | Vulnerable | Rockwell |
| cpe:2.3:h:rockwellautomation:micrologix_1400-b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:o:rockwellautomation:micrologix_1400-c_firmware:*:*:*:*:*:*:*:* | up to 21.007 | Vulnerable | Rockwell |
| cpe:2.3:h:rockwellautomation:micrologix_1400-c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:o:rockwellautomation:micrologix_1400-a_firmware:*:*:*:*:*:*:*:* | up to 7.000 | Vulnerable | Rockwell |
| cpe:2.3:h:rockwellautomation:micrologix_1400-a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
- cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Rockwell
- cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Rockwell
- cpe:2.3:h:rockwellautomation:micrologix_1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:o:rockwellautomation:micrologix_1400-b_firmware:*:*:*:*:*:*:*:* Versions up to 21.007 Vulnerable ·Rockwell
- cpe:2.3:h:rockwellautomation:micrologix_1400-b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:o:rockwellautomation:micrologix_1400-c_firmware:*:*:*:*:*:*:*:* Versions up to 21.007 Vulnerable ·Rockwell
- cpe:2.3:h:rockwellautomation:micrologix_1400-c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:o:rockwellautomation:micrologix_1400-a_firmware:*:*:*:*:*:*:*:* Versions up to 7.000 Vulnerable ·Rockwell
- cpe:2.3:h:rockwellautomation:micrologix_1400-a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-46670
- 2026-10-03 Alias added: GHSA-x7wf-5vvq-hf3f
References
More Rockwell Micrologix 1100 Firmware vulnerabilities
- TI-2015-05450 Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000… CVSS 3.1CRITICAL 9.8
- TI-2020-05638 Hard-coded credentials in Rockwell Automation MicroLogix 1400 Controllers Series B… CVSS 3.1CRITICAL 9.8
- TI-2020-05632 Broken or risky cryptographic algorithm in Rockwell Automation MicroLogix 1400… CVSS 3.1CRITICAL 9.8
- TI-2021-12619 Improper input validation in Rockwell Automation MicroLogix 1100 CVSS 3.1HIGH 8.6
- TI-2015-05452 Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN… CVSS 3.1HIGH 7.5
- TI-2020-05636 Improper authentication in Rockwell Automation MicroLogix 1400 Controllers Series B… CVSS 3.1HIGH 7.5
Sources
- CVE-2022-46670 · CVE Program
- CVE-2022-46670 · NVD
- FIRST EPSS
- GHSA-x7wf-5vvq-hf3f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences