Priority LOW 32
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the abil…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00582 · Published 2022-12-16 · No fix listed CWE-79
Priority MEDIUM 40
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00723 · Published 2022-12-16 · No fix listed CWE-924
Priority LOW 32
The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01684 · Published 2022-07-20 · No fix listed CWE-1021
Priority MEDIUM 48
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is switched to RUN mode, which results in a de…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.02637 · Published 2021-07-09 · No fix listed CWE-20
Priority MEDIUM 55
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03877 · Published 2020-03-16 · No fix listed CWE-327
Priority MEDIUM 58
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05888 · Published 2020-03-16 · No fix listed CWE-321
Priority MEDIUM 47
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05418 · Published 2020-03-16 · No fix listed CWE-603
Priority LOW 16
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol (SMTP…
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00415 · Published 2020-03-16 · No fix listed CWE-312
Priority LOW 33
In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03032 · Published 2019-04-25 · No fix listed CWE-601
Priority MEDIUM 48
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HTTP request.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06089 · Published 2015-10-28 · No fix listed CWE-119
Priority LOW 22
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01617 · Published 2015-10-28 · No fix listed
Priority MEDIUM 61
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09513 · Published 2015-10-28 · No fix listed CWE-121
Priority LOW 25
Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02836 · Published 2015-10-28 · No fix listed CWE-79
Priority LOW 36
SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.04292 · Published 2015-10-28 · No fix listed CWE-89