Rockwellautomation Micrologix 1100 vulnerabilities
8 vulnerabilities
Known vulnerabilities in Rockwellautomation Micrologix 1100, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-6490rockwellautomationmicrologix_1100_firmware+1
EPSS score7.02%
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors.CVE-2015-6486rockwellautomationmicrologix_1100_firmware+1EPSS score4.29%
SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.CVE-2015-6492rockwellautomationmicrologix_1100_firmware+1EPSS score4.48%
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HTTP request.CVE-2015-6488rockwellautomationmicrologix_1100_firmware+1EPSS score2.84%
Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2015-6491rockwellautomationmicrologix_1100_firmware+1EPSS score1.62%
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors.CVE-2022-46670rockwell automationmicrologix 1100 & 1400 controllers+7EPSS score0.58%
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.CVE-2022-3166rockwell automationmicrologix 1100+4EPSS score0.72%
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the deviceCVE-2019-10955rockwell automationcompactlogix 5370 l1 controllers+9EPSS score3.06%
In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers (includes CompactLogix GuardLogix controllers) v30.014 and earlier, an open redirect vulnerability could allow a remote unauthenticated attacker to input a malicious link to redirect users to a malicious site that could run or download arbitrary malware on the user’s machine.