Rockwell Automation Micrologix 1100
Approved changes feed: RSS · Atom
cpe:2.3:h:rockwellautomation:micrologix_1100:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Rockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba) |
|---|---|
| Product | Micrologix 1100 (507447fb-eed3-5ab2-8ea0-aca6b0e2229d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-46670 |
not_vulnerable | 2026-06-08 05:50:39.142595 |
Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack
HIGH (7.1)
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.
Published: 2022-12-16T20:12:22.414Z
Updated: 2025-04-17T14:35:29.173Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3166 |
not_vulnerable | 2026-06-08 05:47:19.602652 |
MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack
HIGH (7.5)
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device
Published: 2022-12-16T19:59:25.261Z
Updated: 2025-04-17T15:30:27.677Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2179 |
not_vulnerable | 2026-06-08 05:42:50.398700 |
ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames
MEDIUM (6.5)
The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.
Published: 2022-07-20T15:36:33.007Z
Updated: 2025-04-16T16:14:37.655Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33012 |
not_vulnerable | 2026-06-08 05:32:08.503684 |
Details available
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is switched to RUN mode, which results in a denial-of-service condition. If successfully exploited, this vulnerability will cause the controller to fault whenever the controller is switched to RUN mode.
Published: 2021-07-09T14:03:55.000Z
Updated: 2026-06-03T13:18:00.338Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6990 |
not_vulnerable | 2026-06-08 05:27:11.564018 |
Details available
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further cryptographic attacks that could ultimately lead to a remote attacker gaining unauthorized access to the controller.
Published: 2020-03-16T15:39:45.000Z
Updated: 2026-06-03T13:26:25.620Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6988 |
not_vulnerable | 2026-06-08 05:27:11.554631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6984 |
not_vulnerable | 2026-06-08 05:27:11.513072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6980 |
not_vulnerable | 2026-06-08 05:27:11.422559 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6111 |
not_vulnerable | 2026-06-08 05:26:44.567081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10955 |
not_vulnerable | 2026-06-08 05:12:25.999503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.