Approved changes feed: RSS · Atom

cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorRockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba)
ProductMicrologix 1100 Firmware (86fec83d-1897-5b4a-b52e-c749b796e780)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2179 vulnerable 2026-06-08 05:42:50.397992 ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames
MEDIUM (6.5)
The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.
Published: 2022-07-20T15:36:33.007Z
Updated: 2025-04-16T16:14:37.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33012 vulnerable 2026-06-08 05:32:08.502874 Details available
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is switched to RUN mode, which results in a denial-of-service condition. If successfully exploited, this vulnerability will cause the controller to fault whenever the controller is switched to RUN mode.
Published: 2021-07-09T14:03:55.000Z
Updated: 2026-06-03T13:18:00.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6990 vulnerable 2026-06-08 05:27:11.563923 Details available
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further cryptographic attacks that could ultimately lead to a remote attacker gaining unauthorized access to the controller.
Published: 2020-03-16T15:39:45.000Z
Updated: 2026-06-03T13:26:25.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6988 vulnerable 2026-06-08 05:27:11.554532 Details available
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client with used password values to authenticate the user on the client-side. This method of authentication may allow an attacker to bypass authentication altogether, disclose sensitive information, or leak credentials.
Published: 2020-03-16T15:38:36.000Z
Updated: 2026-06-03T13:21:33.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6984 vulnerable 2026-06-08 05:27:11.513051 Details available
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.
Published: 2020-03-16T15:41:13.000Z
Updated: 2026-06-03T13:22:52.674Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6980 vulnerable 2026-06-08 05:27:11.421975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10955 vulnerable 2026-06-08 05:12:25.998933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6492 vulnerable 2026-06-08 05:06:52.559952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6491 vulnerable 2026-06-08 05:06:52.559672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6490 vulnerable 2026-06-08 05:06:52.559385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6488 vulnerable 2026-06-08 05:06:52.559065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6486 vulnerable 2026-06-08 05:06:52.558087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.