Micrologix 1400 firmware

This hub aggregates every CVE we track for Micrologix 1400 firmware, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 11 most recently published vulnerabilities affecting Micrologix 1400 firmware.

• CVE-2022-46670Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack7.1Dec 16, 2022
• CVE-2022-3166MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack7.5Dec 16, 2022
• CVE-2022-2179ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames6.5Jul 20, 2022
• CVE-2021-32926When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with a...7.5Jun 3, 2021
• CVE-2021-22659Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random v...8.6Mar 25, 2021
• CVE-2018-17924Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and u...8.6Dec 7, 2018
• CVE-2015-6492Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted...7.5Oct 28, 2015
• CVE-2015-6491Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via u...4.0Oct 28, 2015
• CVE-2015-6490Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vect...9.8Oct 28, 2015
• CVE-2015-6488Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitr...4.3Oct 28, 2015
• CVE-2015-6486SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via...6.5Oct 28, 2015